{"id":581092,"url":"https://alion.io/job/docker-senior-security-engineer-offensive-security","title":"Senior Security Engineer, Offensive Security","company":{"id":569,"name":"Docker","domain":"docker.com","url":"https://alion.io/company/docker","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":86,"open_postings":9,"ghost_share":0,"stale_share":0.556,"repost_share":0,"time_to_fill_p50_days":58,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US","CA"],"hiring_countries_total":2,"salary":null,"salary_estimate":{"min_usd":140000,"max_usd":253000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":390},"experience_years_min":3,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Burp Suite","optional":false},{"name":"Docker","optional":false},{"name":"GCP","optional":false},{"name":"Go","optional":false},{"name":"OWASP","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Zero Trust","optional":false},{"name":"Anomaly Detection","optional":true},{"name":"Kubernetes","optional":true},{"name":"Least Privilege","optional":true},{"name":"Outlook","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-09-09T20:10:45Z","employer_posted_date":"2026-10-01","last_verified_at":"2026-10-30T03:40:14Z","board_verified":true,"closed_at":null,"days_open":50,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":50},"description":"About Docker\nDocker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout.\nWe are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default.\n_______________________________________________________________________\nAs a Senior Security Engineer, Offensive Security, you'll help drive offensive security at Docker, putting our products, platforms, and cloud infrastructure under realistic adversarial testing to surface and drive out attack paths before real adversaries find them. You'll partner with engineering, product, and leadership to turn findings into durable fixes and to shape how security is designed into every Docker product.\nYou'll apply your expertise in penetration testing, threat modeling, and exploit development to find and eliminate risks across Docker products and infrastructure. Working across cloud infrastructure (AWS, GCP, Azure), containerized environments, and AI/ML products, you'll implement proactive security solutions that scale with Docker's growth.\nThis role offers the opportunity to help improve security programs at a company whose products are trusted by millions of developers worldwide. You'll work in a fast-paced, technically challenging environment where your security expertise directly impacts both Docker's platform and the broader container ecosystem.\nResponsibilities:\nContribute to security initiatives that align with business goals, helping ensure security is a core component of our products and infrastructure\n\nSupport and help implement key security programs such as automated security design reviews, and vulnerability management\n\nBuild deep knowledge of software security and architecture, and act as a go-to resource for engineering teams\n\nPartner with engineering to design and implement security architecture and controls across Docker products and platforms\n\nPlan, scope, and execute penetration tests and red-team / adversary-emulation engagements against Docker's products and services\n\nDevelop proof-of-concept exploits and produce clear, risk-rated findings with actionable remediation guidance, then retest fixes to confirm closure\n\nBuild and maintain offensive security tooling and automation to expand testing coverage and repeatability\n\nPerform security reviews and threat modeling (design, architecture, and code) across Docker products and services, including emerging AI products, and write automated security tests and exploits\n\nServe on rotating on-call schedule to respond to security events, investigate threats, and coordinate remediation efforts\n\nEducate and collaborate with cross-functional teams (e.g., engineering, product) to promote security practices\n\nParticipate in Security Incident response\n\nQualifications\nHave 3+ years in security engineering, including hands-on offensive security and penetration testing across applications and infrastructure\n\nPossess 2+ years of hands-on development experience in Python or Golang\n\nDemonstrate deep expertise in authentication, authorization, including technologies like OAuth, cryptography applications and Zero Trust principles.\n\nHave strong hands-on experience with securing cloud ecosystems (e.g. AWS, GCP, Azure)\n\nHave hands-on penetration testing experience across SaaS web applications and APIs., including manual exploitation beyond automated scanners\n\nAre proficient with offensive tooling and techniques such as. Burp Suite, and OWASP frameworks\n\nCan write security tests and develop exploits and proof-of-concepts that find real vulnerabilities in a product\n\nUnderstand AI/ML security risks and mitigations, including prompt injection, data poisoning, model extraction, and adversarial attacks\n\nHave practical experience using LLMs and agentic tooling to automate vulnerability discovery, reconnaissance, and pentesting workflows\n\nHave a track record of building security programs and automations from scratch, applying risk-based prioritization\n\nHave experience performing security reviews and building or improving security review automation\n\nHave excellent communication skills, allowing you to explain complex security concepts clearly to technical and non-technical stakeholders\n\nUnderstand industry standards, and actively keep up with emerging security technologies and models\n\nAre a team player who drives security change via collaboration and cross-functional partnerships\n\nHold offensive security certifications such as OSCP, OSWE, OSEP, GXPN, GPEN, or CRTO\n\nHave published CVEs, original security research, or conference talks\n\nBonus if you:\nHave experience with container escape, Kubernetes attack paths, or cloud red teaming\n\nHave experience testing AI/ML systems for issues like prompt injection, model extraction, and data poisoning\n\nWhat to Expect\nFirst 30 days:\nMeet with security team and key partners across engineering\n\nGain access to team owned systems, and internal documentation\n\nComplete security awareness training and compliance onboarding\n\nReview application architecture, tech stack and data flow\n\nReview risk registry and annual roadmap\n\nFamiliarize oneself with team workflows and processes\n\nShadow a fellow security engineer during their on-call/secops rotations\n\nFirst 90 days:\nConduct security review on emerging Docker products\n\nScope and execute your first penetration test against a Docker product or service\n\nActively participate in architecture design reviews with the team\n\nContribute to a Security-owned project or initiative\n\nCollaborate with Docker developers to validate and resolve discovered vulnerabilities\n\nEnhance incident response capabilities by participating in on-call rotation and post-incident activities\n\nCreate and maintain security documentation and runbooks\n\nFirst Year Outlook\nContribute to the security roadmap for improving security controls\n\nStrengthen Zero Trust architecture and least privilege access controls\n\nEnhance security monitoring and anomaly detection\n\nPerform security reviews for major product releases\n\nOwn and run recurring penetration tests and adversary-emulation exercises across Docker products, and engage with external researchers\n\nSupport audits and ensure compliance with SOC 2, ISO 27xxx\n\nAdvocate for “security by design” in all product features\n\nBecome well versed in Docker products and emerging AI technologies\n\nDocker does not offer visa sponsorship for this role.\nCompensation & Equity\nCanada: CA$271,150 - CA$434,000 + equity\nUnited States: $194,150 - $312,950 + equity\n______________________________________________________________________\nPosting Information\nOpen vacancy: This posting is for an existing open role.\n\nAI in hiring: Docker may use AI-assisted tools during our recruiting process.\n\nInterview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent.\n\n______________________________________________________________________\nPerks & Benefits\nRemote-first by design - Work from your home, with offices in Seattle and Paris for connection and collaboration.\n\nFlexibility that fits your life - We trust you to manage your schedule while delivering great work.\n\nTime to recharge - Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break.\n\nHome office support - Set up your workspace for comfort and success.\n\nTechnology stipend - Equivalent to US$100 net per month to help support your work.\n\nLearning & development - Annual stipend for conferences, courses, certifications, and continued learning.\n\nParental leave - 16 weeks of paid parental leave after six months of employment.\n\nEquity for all full-time employees - Share in Docker's long-term success as we continue to grow.\n\nComprehensive benefits - Medical, retirement, and paid holidays vary by country.\n\nDocker swag - Because representing the whale never gets old.\n\nDocker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community.","description_format":"text","description_chars":8683,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Home office","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","DevOps & Platform Engineering","Virtualization & Containers","Developer Tools"],"lifecycle":[{"event":"open","at":"2026-09-09T22:13:34Z"}],"visa":[],"liveness":{"score":68,"band":"ok","label":"Likely open","p_open":1,"p_active":0.903,"p_room":0.75,"age_days":49,"expected_fill_days":58,"reasons":["conf:0","velocity","win:late"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/docker-senior-security-engineer-offensive-security","json_url":"https://alion.io/job/docker-senior-security-engineer-offensive-security.json","meta":{"generated_at":"2026-10-30T05:09:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7230,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":569},"rest":"https://alion.io/mcp/rest/get_company?id=569"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdocker-senior-security-engineer-offensive-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdocker-senior-security-engineer-offensive-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdocker-senior-security-engineer-offensive-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/docker-senior-security-engineer-offensive-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdocker-senior-security-engineer-offensive-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":581092}},{"tool":"search_jobs","arguments":{"company":"docker.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":581092},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}