Senior Security Engineer, Docker
Detection & Response
$167.2-209k
Offers Equity. Salary applicable to US applicants and may vary dependent on location
More information about location
App development platform
Be an early applicant
App development platform
501-1000 employees
Be an early applicant
$167.2-209k
Offers Equity. Salary applicable to US applicants and may vary dependent on location
More information about location
501-1000 employees
Company mission
To increase the time developers spend on innovation, and decrease the time they spend on everything else.
Role
Who you are
- Background in Information Security, Computer Science, Computer Engineering, Forensics, or equivalent work experience
- 4-5 years of hands-on experience in detection and response, including triage and incident response in enterprise SaaS environments
- Proven experience in building log ingestion and normalization pipelines across diverse systems
- Expertise in Detection as Code, particularly using Python and SQL
- Subject matter expert in endpoint security and/or cloud security
- Strong working knowledge of Mac, Linux, and Windows operating systems
- Hands-on experience with major cloud infrastructures, including AWS, Azure, and GCP
- Experience with Kubernetes is a nice-to-have
- Demonstrated experience working across multiple teams in collaborative security roles
What the job involves
- Docker’s Security Team is committed to protecting both our organization and our customers
- The Detection and Response Team plays a critical role in identifying, analyzing, and mitigating threats across Docker’s infrastructure
- We are now seeking a Senior Detection and Response Engineer with expertise in log pipeline generation to enhance security visibility, threat detection, and response capabilities
- This role will lead threat detection, investigation, and automation efforts while working closely with IT, Security & Compliance, and Engineering teams to build high-fidelity security telemetry and enable real-time threat detection, incident response, and forensic analysis
- Detection as Code & Incident Response – Monitor, detect, and respond to cybersecurity threats, lead incident investigations, conduct root cause analysis, and automate threat detection and hunting. Develop detection and response playbooks and participate in on-call rotations
- Log Pipeline Development & Optimization – Design, implement, and maintain log ingestion, parsing, and normalization pipelines across endpoint, network, cloud, and application logs. Ensure log consistency across EDR, SIEM, SOAR, and threat detection tools
- Automation & Infrastructure as Code (IaC) – Use Terraform, Kubernetes, and scripting to automate log infrastructure in cloud environments and improve security monitoring efficiency
- Compliance & Data Retention – Ensure log storage and retention meet regulatory and security requirements, support audit to maintain compliance
- Cross-Team Collaboration & Security Strategy – Work with Product Security, Infrastructure, DevOps, and IT on various initiatives to mature the Detection Engineering program and strengthen Docker’s overall security posture. Partner with stakeholders to improve threat intelligence, detection, and incident response capabilities
- What to expect in the first 30 days
- Understand Docker’s infrastructure and identify gaps in the current Detection Engineering program
- Establish and build collaborative relationships with key security stakeholders
- Coordinate and support security incident investigations
- What to expect in the first 90 days
- Develop a roadmap for log development and optimization
- Drive log ingestion and alerting improvements in SIEM and other security tools
- Refine existing playbooks with a fresh perspective
- Participate in security on-call rotation
- What to expect in the first year
- Become a key partner within Docker’s cross-functional Security team
- Own and mature one or more Detection & Response initiatives
- Help shape Docker’s security roadmap and its interconnection with Engineering
- Lead educational initiatives to strengthen Docker’s security posture company-wide
Our take
Docker supplies a hub and desktop solution to simplify the workflow of app development teams. Originally known for popularising the idea of containerising software, it saw itself outpaced by Kubernetes. However, the company has identified a problem with the growing complexity of containerisation, with some apps consisting of dozens or even hundreds of containers - which is what it now addresses.
Docker has had a difficult time in the recent past, with 2019 seeing it sell off its enterprise business, reduce its workforce by hundreds, and change its leadership team. As a well known brand and ecosystem for containerisation, however, it aims to lure developers back to its product as well as to take advantage of the growing global demand for app development.
Returning to focus on developers rather than large companies was certainly a gamble, but one that seems to have paid off. The company has returned to profitability and raised Series C funding in 2022, which is cited to fund hiring new talent, ramping up its business, and continuing to develop and refine its product. It's also embarked on a series of acquisitions to
Steph
Company Specialist at Welcome to the Jungle
Insights
47% employee growth in 12 months
Company
Funding (last 2 of 10 rounds)
Mar 2022
$105m
SERIES C
Mar 2021
$23m
SERIES B
Total funding: $497.9m
Company benefits
- 100% company paid medical premiums for employees and dependents
- Flexible Time Off Policy
- “Whaleness” Days — At least 1 company wide day off per month
- Employer Paid Holidays
- Generous Maternity and Parental Leave
- Home Office Set Up Budget
- Monthly Technology Stipend
- Training Allowances
- Life and Disability Insurance
- Retirement Plans
- Virtual and In-Person Social Events
- Docker Swag
- Quarterly Hackathons
- Virtual Coffee with Co-Workers
Company HQ
China Basin, San Francisco, CA
Leadership
Scott Johnston
(CEO, not founder)Has been COO and CPO with Docker prior to CEO role. Before that was VP, Marketing & Product at Puppet and a Venture Partner at Alloy Ventures.
Share this job
View 20 more jobs at Docker