Senior Manager, Docker

• 7+ years of experience in security engineering and/or engineering
• 2+ years experience leading engineering teams and familiarity with agile development and security
• Knowledge and experience implementing secure coding best practices
• Experience with AWS
• Experience with Terraform or other cloud configuration tools
• Understanding of security nuances in cloud-native container-based systems
• Fundamental knowledge of encryption and best practices
• Have participated in SOC2, ISO 270001 or equivalent compliance prep and audits

Desirable

• The Security Engineering Manager will report to the Director of Security, Risk and Trust and help Docker enable the growth of Docker’s products with a Security first mindset
• The Security Engineering Manager will manage a team of security engineers across all of Docker’s products
• The Security Engineering team enables the secure design and engineering of Docker’s products and secures Docker’s systems and tools with the goal of exceeding security standards, compliance, and audit requirements with velocity and automation in mind
• You will work closely with all Docker’s engineering teams in helping determine the overall security strategy for Docker products
• Manage Docker’s Security Engineering team
• Set team goals and objectives, conduct regular one-on-one meetings with direct reports
• Participate in Security Team On-call rotation
• Review the security posture and processes
• Drive enhancements and improvements to security processes
• Participate in code reviews, vulnerability remediation, and larger scale engineering projects to help improve security posture, automation, controls, offensive security/red teaming
• Be a liaison to internal customers and the wider organization, making sure they have the resources and knowledge to maintain our security standards
• Partner with the Governance, Risk and Compliance team to find a best fit in enforcing compliance and audit controls while assuring engineering velocity
• What to expect in the first 30 days
• Understand how Product Security fits into the wider organization
• Lead Security Engineering team in executing critical initiatives and projects
• Schedule 1-on-1’s with each direct report
• Get to know each team member
• Meet and gather feedback from key leaders from the teams we support
• Build a high level understanding of the existing product security plans and guide the team through execution
• What to expect in the first 90 days
• Set OKRs for the next quarter
• Contribute to reporting processes to leadership
• Set career goals with team members and start working towards them
• Lead Docker security champion program
• Participate in Incident response
• Meet regularly with engineering managers
• What to expect in the first year
• Further Docker’s initiative of security first throughout engineering
• Lead Docker’s Product Security team initiatives
• Have demonstrable results on team career development and team happiness / effectiveness