This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
As a Senior Security Engineer, you'll be a trusted advisor to engineering and product teams, ensuring security is built into every Docker product from the ground up. You'll partner with leadership to shape product security strategy, influence architectural decisions, and drive adoption of security controls across the organization. You'll apply your expertise in secure architecture, threat modeling, and vulnerability management to identify and mitigate risks early in the development lifecycle. Working across cloud infrastructure (AWS, GCP, Azure), containerized environments, and AI/ML products, you'll implement proactive security solutions that scale with Docker's growth. This role offers the opportunity to build and mature security programs at a company whose products are trusted by millions of developers worldwide. You'll work in a fast-paced, technically challenging environment where your security expertise directly impacts both Docker's platform and the broader container ecosystem.
Job Responsibility:
Work with leadership to align security initiatives with business goals, ensuring that security is a core component of product and infrastructure
Take ownership and drive implementation for key programs such as vulnerability management, cloud governance, and product security
Serve as a security subject matter expert for software security and architecture
Partner with engineering to design and implement security architecture and controls across Docker products and platforms
Perform security design reviews and threat modeling of emerging AI products
Integrate security into SDLC through security requirements, design assessments, and automated security testing
Manage Docker’s Vulnerability Disclosure Program (VDP) by validating submissions, and working with engineering to resolve confirmed issues
Design and enforce security configurations in cloud environments (e.g. AWS, GCP, Azure) according to industry best practices
Establish automated monitoring and alerting to detect security anomalies across our environments
Serve on rotating on-call schedule to respond to security incidents, investigate threats, and coordinate remediation efforts
Educate and collaborate with cross-functional teams (e.g., engineering, product) to promote security practices
Requirements:
At least 5+ years of experience in security engineering roles, with a focus on application and infrastructure security, preferably in a cloud-native or SaaS environment
3+ years of hands-on development experience in Python or Golang
Deep expertise in authentication, authorization, including technologies like OAuth, SAML, OIDC, MFA, cryptography applications and Zero Trust principals