{"id":508,"url":"https://alion.io/job/docker-senior-security-engineer-docker-desktop","title":"Senior Security Engineer, Docker Desktop","company":{"id":569,"name":"Docker","domain":"docker.com","url":"https://alion.io/company/docker","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":78,"open_postings":8,"ghost_share":0,"stale_share":0.875,"repost_share":0,"time_to_fill_p50_days":58,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["CA","US","DE","GB","IT","ES","PT"],"hiring_countries_total":7,"salary":null,"salary_estimate":{"min_usd":73000,"max_usd":133000,"period":"year","method":"role_seniority_country_cell","sample_n":46},"experience_years_min":6,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"containerd","optional":false},{"name":"CVE","optional":false},{"name":"CVSS","optional":false},{"name":"Docker","optional":false},{"name":"Go","optional":false},{"name":"Linux","optional":false},{"name":"Outlook","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-04-28T14:43:00Z","employer_posted_date":"2026-04-28","last_verified_at":"2026-10-17T07:06:40Z","board_verified":true,"closed_at":null,"days_open":171,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":171},"description":"About Docker\nDocker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout.\nWe are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default.\n_______________________________________________________________________\nAs a Senior Security Engineer embedded in the Desktop engineering team, you will own the security posture of a complex, cross-platform product that sits at the intersection of identity, OCI runtimes, and Linux kernel internals. You will be the team's primary security voice, reviewing features and code before they ship, partnering with our central security organization, and serving as the first line of triage for reported vulnerabilities.\nThis is a hands-on engineering role for someone who thinks in threat models and communicates clearly with both product engineers and security specialists alike.\nResponsibilities:\nPartner with engineering and product teams throughout the development lifecycle to identify security risks early, from design review through code review and release.\n\nConduct threat modeling and security design reviews for new and evolving product features, with particular focus on authentication, authorization, and container runtime security.\n\nServe as the team's primary liaison to the organization's security group, attending security syncs, relaying guidance, and translating central policy into practical engineering decisions.\n\nAct as the first point of contact for incoming vulnerability reports and CVEs: validate severity, reproduce issues, coordinate disclosure timelines, and drive remediation with the relevant engineers.\n\nReview Go code with a security mindset, identifying classes of issues such as privilege escalation, insecure defaults, injection risks, and improper credential handling.\n\nContribute security-focused improvements directly to the codebase where appropriate.\n\nDevelop and maintain internal security documentation, guidelines, and runbooks for the team.\n\nStay current on the Linux security landscape as it pertains to containers: namespaces, cgroups, seccomp, AppArmor, capabilities, and the evolving OCI ecosystem.\n\nThis role may require participation in an on-call rotation to provide support outside of standard business hours, including evenings, weekends, and holidays, as needed.\n\nQualifications:\n6+ years of experience in security engineering, application security, or a closely related discipline, with a track record at senior or staff level.\n\nBachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience.\n\nStrong proficiency in Go, with the ability to review and contribute to production-grade code.\n\nDeep understanding of Linux fundamentals relevant to container security: namespaces, cgroups, capabilities, seccomp profiles, AppArmor/SELinux, rootless containers, and privilege boundaries.\n\nSolid grasp of OCI specifications and container runtime security (e.g. runc, containerd, BuildKit).\n\nHands-on experience with identity and access management concepts: OAuth 2.0, OIDC, token handling, and auth flows in desktop or cloud-adjacent contexts.\n\nExperience performing security design reviews, threat modeling, and participating in secure development workflows.\n\nFamiliarity with vulnerability management processes: CVE triage, CVSS scoring, coordinated disclosure, and working with external reporters.\n\nStrong written and verbal communication skills; comfortable bridging the gap between a dedicated security team and a product engineering team.\n\nWhat to Expect\nFirst 30 Days\nYou will onboard into the team and get hands-on with the Docker Desktop codebase, architecture, and development workflow. You will meet your counterparts in the central security organization and learn how vulnerability reports are currently handled. The goal is to listen, ask questions, and build a clear picture of the product's current security posture, not to change anything yet.\nFirst 90 Days\nYou will be an active participant in design and code reviews, bringing a security lens to features in flight. You will have taken ownership of the vulnerability intake process, handling your first end-to-end triage cycles with minimal guidance. You will have a working relationship with the engineers on the team and a growing sense of where the most meaningful security investments should be made.\nOne Year Outlook (First Year)\nYou will be the team's trusted authority on product security. You will have driven meaningful improvements to how the team approaches security across the development lifecycle, whether that's better threat modeling practices, improved auth flows, stronger container isolation defaults, or reduced time-to-remediation for reported issues. you will be a known presence in the broader security organization, and your work will be directly visible in the security and resilience of a product used by millions of developers every day.\nDocker considers visa sponsorship on a case-by-case basis based on business needs.\nCompensation & Equity\nCanada: CA$271,150 - CA$434,000 + equity\nUnited States: $194,150 - $312,950 + equity\nEU: €113,860 - €186,780 + equity\n______________________________________________________________________\nPosting Information\nOpen vacancy: This posting is for an existing open role.\n\nAI in hiring: Docker may use AI-assisted tools during our recruiting process.\n\nInterview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent.\n\n______________________________________________________________________\nPerks & Benefits\nRemote-first by design - Work from your home, with offices in Seattle and Paris for connection and collaboration.\n\nFlexibility that fits your life - We trust you to manage your schedule while delivering great work.\n\nTime to recharge - Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break.\n\nHome office support - Set up your workspace for comfort and success.\n\nTechnology stipend - Equivalent to US$100 net per month to help support your work.\n\nLearning & development - Annual stipend for conferences, courses, certifications, and continued learning.\n\nParental leave - 16 weeks of paid parental leave after six months of employment.\n\nEquity for all full-time employees - Share in Docker's long-term success as we continue to grow.\n\nComprehensive benefits - Medical, retirement, and paid holidays vary by country.\n\nDocker swag - Because representing the whale never gets old.\n\nDocker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community.","description_format":"text","description_chars":7364,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Home office","Parental leave"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"},{"name":"United States","iso":"US","kind":"country"},{"name":"Germany","iso":"DE","kind":"country"},{"name":"United Kingdom","iso":"GB","kind":"country"},{"name":"Italy","iso":"IT","kind":"country"},{"name":"Spain","iso":"ES","kind":"country"},{"name":"Portugal","iso":"PT","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevOps & Platform Engineering","Virtualization & Containers","Developer Tools"],"lifecycle":[{"event":"open","at":"2026-04-28T14:43:00Z"}],"visa":[],"liveness":{"score":20,"band":"cold","label":"Long shot","p_open":1,"p_active":0.701,"p_room":0.28,"age_days":171,"expected_fill_days":58,"reasons":["conf:2","velocity","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/docker-senior-security-engineer-docker-desktop","json_url":"https://alion.io/job/docker-senior-security-engineer-docker-desktop.json","meta":{"generated_at":"2026-10-17T07:07:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9715,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":569},"rest":"https://alion.io/mcp/rest/get_company?id=569"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdocker-senior-security-engineer-docker-desktop"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdocker-senior-security-engineer-docker-desktop"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdocker-senior-security-engineer-docker-desktop"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/docker-senior-security-engineer-docker-desktop\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdocker-senior-security-engineer-docker-desktop"}]}