Senior Software Engineer, Security, Docker Desktop
Senior engineer on the Docker Desktop team embedding security into a widely used developer platform: writing production Go for authentication, authorization, and container isolation, running threat models and security reviews, and managing CVEs and vulnerability disclosure. Remote-first role based in the US.
- Compensation
- $194.2K–$313K / yr
- Location
- US
- Work setup
- Remote
- Seniority
- Senior
- Employment
- Full time
- Experience
- 6+ years
- Category
- Software engineering
- Posted
Skills
Must have
- 6+ years professional software engineering experience with security-sensitive systems exposure
- Strong proficiency in Go with production-grade software delivery
- Linux fundamentals for container security: namespaces, cgroups, capabilities, seccomp, AppArmor, SELinux, rootless containers, privilege boundaries
- Familiarity with OCI specifications and container runtime architecture
- IAM knowledge: OAuth 2.0, OIDC, token management, authentication/authorization workflows
- Experience with security architecture reviews and threat modeling
- Vulnerability management: CVE triage, CVSS scoring, coordinated disclosure
- Balance security with functionality, performance, and maintainability
- Strong software engineering fundamentals and secure development practices
- Ownership of technical initiatives from assessment through implementation
- Excellent written and verbal communication skills
- Strong analytical and problem-solving abilities
- Work independently in a globally distributed team
Full description
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Software Engineer, Security, Docker Desktop based in the United States.
We are seeking an experienced Software Engineer with a strong passion for cybersecurity to strengthen the security of a widely adopted, cross-platform developer platform. In this role, you will work directly within the Desktop engineering team, integrating security principles into product development and ensuring secure-by-default experiences. You will contribute production-grade Go code while focusing on critical areas such as authentication, authorization, container isolation, and Linux security. Working closely with engineering and security specialists, you will identify vulnerabilities, assess potential threats, and implement effective solutions. You will also influence architectural decisions, improve security workflows, and promote secure development practices across the engineering organization. This is an opportunity to make a meaningful impact on tools used by millions of developers worldwide while working in a collaborative, globally distributed, remote-first environment.
Accountabilities:
- Contribute directly to the product codebase using Go, focusing on security-sensitive components such as authentication flows, privilege boundaries, and container runtime behavior.
- Integrate security considerations into everyday engineering activities, ensuring new features are developed with secure defaults and robust protection mechanisms.
- Participate in technical design discussions and code reviews, identifying potential security risks and recommending improvements before features are released.
- Conduct threat modeling and security design reviews for new and evolving product capabilities, particularly those involving authentication, authorization, identity management, and container runtime security.
- Act as the primary liaison between the Desktop engineering team and the central security organization, translating security policies and recommendations into practical engineering decisions.
- Manage incoming vulnerability reports and Common Vulnerabilities and Exposures (CVEs), including validating reported issues, assessing severity, reproducing vulnerabilities, and coordinating remediation.
- Oversee vulnerability disclosure processes, collaborating with external security researchers and internal engineering teams to establish appropriate timelines and ensure vulnerabilities are addressed effectively.
- Develop, maintain, and improve internal security documentation, engineering guidelines, procedures, and operational runbooks.
- Monitor developments in Linux and container security, including namespaces, cgroups, seccomp, AppArmor, Linux capabilities, and evolving Open Container Initiative (OCI) standards.