Senior Software Engineer, Security, Docker Desktop

The role

You will contribute to the Docker Desktop codebase in Go with a focus on security-sensitive areas. You will perform threat modeling, design reviews, and vulnerability management for a cross-platform product.

What you will do

• Contribute to the Docker Desktop codebase in Go.
• Participate in design and code reviews.
• Conduct threat modeling and security design reviews.
• Serve as the primary liaison to the organization's security group.
• Act as the first point of contact for incoming vulnerability reports and CVEs.
• Develop and maintain internal security documentation, guidelines, and runbooks.
• Stay current on the Linux security landscape regarding containers.

Required qualifications

• 6+ years of software engineering experience.
• Strong proficiency in Go.
• Solid understanding of Linux fundamentals relevant to container security: namespaces, cgroups, capabilities, seccomp profiles, AppArmor/SELinux, rootless containers, and privilege boundaries.
• Familiarity with OCI specifications and container runtime internals.
• Working knowledge of identity and access management concepts: OAuth 2.0, OIDC, token handling, and auth flows.
• Comfort participating in security design reviews and threat modeling.
• Familiarity with vulnerability management processes: CVE triage, CVSS scoring, coordinated disclosure, and working with external reporters.
• Strong written and verbal communication skills.

Benefits

• Remote-first by design
• Flexibility to manage your schedule
• Generous PTO
• Designated quarterly Whaleness Days
• Designated end-of-year Whaleness break
• Home office support
• Technology stipend equivalent to US$100 net per month
• Annual stipend for conferences, courses, certifications, and continued learning
• 16 weeks of paid parental leave after six months of employment
• Equity for all full-time employees
• Medical, retirement, and paid holidays vary by country
• Docker swag

Before you apply

• Docker considers visa sponsorship on a case-by-case basis based on business needs.
• Docker may use AI-assisted tools during our recruiting process.
• Candidates may be invited to opt in to interview recordings.

About the company

Docker is a globally distributed, remote-first team building tools like Docker Desktop, Docker Hub, and Docker Scout. The company provides sandboxed environments, verified images, and secure infrastructure for developers.