Senior Security Engineer jobs in United States
cer-icon
Apply on Employer Site
company-logo

Docker, Inc · 1 day ago

Senior Security Engineer

Docker, Inc is a company focused on making app development easier for developers. As a Senior Security Engineer, you will ensure security is integrated into Docker products, shape product security strategy, and implement proactive security solutions across various platforms.

Developer PlatformDeveloper ToolsInformation TechnologySoftware
check
Comp. & Benefits
badNo H1Bnote

Responsibilities

Work with leadership to align security initiatives with business goals, ensuring that security is a core component of product and infrastructure
Take ownership and drive implementation for key programs such as vulnerability management, cloud governance, and product security
Serve as a security subject matter expert for software security and architecture
Partner with engineering to design and implement security architecture and controls across Docker products and platforms
Perform security design reviews and threat modeling of emerging AI products
Integrate security into SDLC through security requirements, design assessments, and automated security testing
Manage Docker’s Vulnerability Disclosure Program (VDP) by validating submissions, and working with engineering to resolve confirmed issues
Design and enforce security configurations in cloud environments (e.g. AWS, GCP, Azure) according to industry best practices
Establish automated monitoring and alerting to detect security anomalies across our environments
Serve on rotating on-call schedule to respond to security incidents, investigate threats, and coordinate remediation efforts
Educate and collaborate with cross-functional teams (e.g., engineering, product) to promote security practices

Qualification

Security engineeringCloud securityPythonGolangThreat modelingVulnerability managementZero Trust principlesCompliance regulationsCommunication skillsTeam playerCollaboration

Required

Have at least 5+ years of experience in security engineering roles, with a focus on application and infrastructure security, preferably in a cloud-native or SaaS environment
Possess 3+ years of hands-on development experience in Python or Golang
Demonstrate deep expertise in authentication, authorization, including technologies like OAuth, SAML, OIDC, MFA, cryptography applications and Zero Trust principals
Have strong hands-on experience with securing cloud ecosystems (e.g: AWS, GCP, Azure)
Understand AI/ML security risks and mitigations, including prompt injection, data poisoning, model extraction, and adversarial attacks
Have deployed runtime security solutions for threat detection and policy enforcement in Kubernetes, Docker environments
Have a track record of building security programs and automations from scratch, applying risk-based prioritization
Have an understanding of compliance regulations (e.g, SOC 2, ISO 27xxx, GDPR, CCPA, FIPS) and ability to align security with compliance requirements
Have excellent communication skills, allowing you to explain complex security concepts clearly to technical and non-technical stakeholders
Understand industry standards, and actively keep up with emerging security technologies and models
Are a team player who drives security change via collaboration and cross-functional partnerships

Benefits

Freedom & flexibility; fit your work around your life
Designated quarterly Whaleness Days plus end of year Whaleness break
Home office setup; we want you comfortable while you work
16 weeks of paid Parental leave
Technology stipend equivalent to $100 net/month
PTO plan that encourages you to take time to do the things you enjoy
Training stipend for conferences, courses and classes
Equity; we are a growing start-up and want all employees to have a share in the success of the company
Docker Swag
Medical benefits, retirement and holidays vary by country
Remote-first culture, with offices in Seattle and Paris

Company

Docker, Inc

company-logo
At Docker, we simplify the lives of developers who are making world-changing apps.

Funding

Current Stage
Late Stage
Total Funding
$435.86M
Key Investors
Bain Capital VenturesTribe CapitalInsight Partners
2022-03-31Series C· $105M
2021-03-16Series B· $23M
2019-11-13Series A· $35M

Leadership Team

leader-logo
Jean-Laurent de Morlhon
Vice President of Software Engineering
linkedin
K
Kamel Founadi
Founder
Company data provided by crunchbase