Senior Security Engineer, Docker
$201.6-252k
Offers Equity. Shown is the US based salary range
More information about location
App development platform
Open for applications
App development platform
501-1000 employees
Open for applications
$201.6-252k
Offers Equity. Shown is the US based salary range
More information about location
501-1000 employees
Company mission
To increase the time developers spend on innovation, and decrease the time they spend on everything else.
Role
Who you are
- Professional Experience: Have at least 5+ years of experience security engineering roles, with a focus on product security, infrastructure security, ideally in a cloud-first environment
- Software Development Experience: 3+ years of experience developing in Python or Golang
- Secure Coding Principles: Have knowledge of secure coding principles and experience with security testing tools (SAST, DAST) within CI/CD pipelines
- Identity Management: Understand, authentication, authorization, including technologies like OAuth, SAML, OIDC, MFA, cryptography applications and Zero Trust principals
- Cloud Security: Strong cloud expertise with hands-on experience in cloud ecosystems (e.g: AWS, GCP, or Azure)
- Container Security: Knowledge on securing containerized environments: (Docker, Kubernetes) and implementing runtime security tools
- Endpoint Security: Previous experience evolving and enforcing policies to assist co-workers in maintaining corporate and cloud security
- Compliance knowledge: Familiar with data privacy and compliance regulations (e.g, SOC 2, ISO 27xxx, GDPR, CCPA, FIPS) aligning security initiatives
- Communication Skills: Ability to explain complex security concepts clearly to both technical and non-technical stakeholders developers, executives and non-technical stakeholders
- Experience in startups or High-Growth Environments: have previous experience in a fast-growing startup where security processes and policies were built from the ground up
What the job involves
- As an experienced Security Engineer at Docker, you’ll be a trusted advisor, collaborating closely with engineering and product teams to ensure security is a cornerstone of every product
- You’ll partner with leadership to shape product strategy, advocate for strong security controls and influence future product iterations
- By leveraging your deep industry knowledge, you’ll lead the charge in implementing secure architecture and design principles, ensuring early detection and prevention of vulnerabilities
- Your expertise in security assessments and penetration testing will help identify and mitigate potential threats, while your mentorship and training efforts will foster a security-conscious culture
- This is a unique opportunity to make a foundational impact on the security of an innovative, fast-growing company by building scalable, proactive solutions that protect both our platform and the customers who trust us
- As a Senior Security Engineer, you will play a pivotal role in the integration of security into our software development lifecycle, enhancing the security posture of our applications
- Embed security best practices within the Software Development Lifecycle (SDLC), including secure coding, code review, and application security testing
- Partner closely with engineering to drive security architecture and processes that implement security controls across our software and systems
- Design and enforce security configurations in cloud environments (e.g. AWS), including IAM roles, security groups, and VPC segmentation
- Establish automated monitoring and alerting to detect anomalies or potential breaches across cloud infrastructure
- Maintain cloud and infrastructure security: AWS Security Hub, AWS IAM, AWS Key Management (KMS), OPA for Terraform
- Take ownership, define strategy, and drive improvement for part so our security program such as threat modeling, secrets management, or container security
- Plan and perform product security assessments including architecture review, threat modeling, code review, pen testing and general security consulting to proactively build security controls
- Partner with detection and response to create new capabilities or respond to security events
- Work with leadership to align security initiatives with business goals, ensuring that security is a core component of product and infrastructure
- Serve as a security subject matter expert for software security and architecture
- Educate and collaborate with cross-functional teams (e.g., engineering, product) to promote security practices
- Have the ability to participate in our incident response team on-call rotation
- What to expect in the first 30 days:
- Meet with security team, engineering teams, and leadership
- Gain access to security tools, logs, dashboards and internal documentation
- Complete security awareness training and compliance onboarding
- Review application architecture, tech stack and data flow
- Identify key entry points, APIs, authentication flows and dependencies
- Identify security controls already in place (SAST, DAST, container security, API security)
- Evaluate cloud security posture (AWS, GCP, Azure)
- What to expect in the first 90 days:
- Conduct threat modeling for a critical feature or service
- Perform secure code reviews for major product components
- Work with developers to fix vulnerabilities from previous security audits
- Enhance incident response capabilities by participating in on-call rotations and post-incident activities
- Create and maintain security runbooks for handling security vulnerabilities or project initiatives
- What to expect in the first year:
- Support long-term security roadmap for improving security controls
- Strengthen Zero Trust architecture and least privilege access controls
- Enhance AI-based security monitoring and anomaly detection
- Perform quarterly security reviews for major product updates
- Conduct a penetration test or engage with external researchers
- Support audits and ensure compliance with SOC 2, ISO 27xxx
- Advocate for “security by design” in all product features
- Lead security awareness campaigns and company-wide security events
Our take
Docker supplies a hub and desktop solution to simplify the workflow of app development teams. Originally known for popularising the idea of containerising software, it saw itself outpaced by Kubernetes. However, the company has identified a problem with the growing complexity of containerisation, with some apps consisting of dozens or even hundreds of containers - which is what it now addresses.
Docker has had a difficult time in the recent past, with 2019 seeing it sell off its enterprise business, reduce its workforce by hundreds, and change its leadership team. As a well known brand and ecosystem for containerisation, however, it aims to lure developers back to its product as well as to take advantage of the growing global demand for app development.
Returning to focus on developers rather than large companies was certainly a gamble, but one that seems to have paid off. The company has returned to profitability and raised Series C funding in 2022, which is cited to fund hiring new talent, ramping up its business, and continuing to develop and refine its product. It's also embarked on a series of acquisitions to
Steph
Company Specialist at Welcome to the Jungle
Insights
47% employee growth in 12 months
Company
Funding (last 2 of 10 rounds)
Mar 2022
$105m
SERIES C
Mar 2021
$23m
SERIES B
Total funding: $497.9m
Company benefits
- 100% company paid medical premiums for employees and dependents
- Flexible Time Off Policy
- “Whaleness” Days — At least 1 company wide day off per month
- Employer Paid Holidays
- Generous Maternity and Parental Leave
- Home Office Set Up Budget
- Monthly Technology Stipend
- Training Allowances
- Life and Disability Insurance
- Retirement Plans
- Virtual and In-Person Social Events
- Docker Swag
- Quarterly Hackathons
- Virtual Coffee with Co-Workers
Company HQ
China Basin, San Francisco, CA
Leadership
Scott Johnston
(CEO, not founder)Has been COO and CPO with Docker prior to CEO role. Before that was VP, Marketing & Product at Puppet and a Venture Partner at Alloy Ventures.
Share this job
View 12 more jobs at Docker