# Senior Security Engineer, Docker Desktop

**Company:** [Docker](https://hotfix.jobs/companies/docker)
**Location:** Remote
**Role:** Security Engineering
**Salary:** CA$271k – CA$434k/yr
**Experience:** 6+ years
**Skills:** Go, Linux, Docker Desktop, Oci, Runc, Containerd, Buildkit, Oauth 2.0, OIDC, Threat Modeling, Cvss, Seccomp, Apparmor, Selinux
**Posted:** 2026-04-28

> Owns the security posture of Docker Desktop through threat modeling, code and design reviews, vulnerability triage, and hands-on security improvements. The role requires senior security experience, strong Go proficiency, and deep knowledge of Linux and container runtime security.

## Job Description

## Responsibilities
- Partner with engineering and product teams throughout the development lifecycle to identify security risks early, from design review through code review and release.
- Conduct threat modeling and security design reviews for new and evolving product features, focusing on authentication, authorization, and container runtime security.
- Serve as the primary liaison to the central security organization, translating policy into practical engineering decisions.
- Act as the first point of contact for vulnerability reports and CVEs: validate severity, reproduce issues, coordinate disclosure timelines, and drive remediation.
- Review Go code for privilege escalation, insecure defaults, injection risks, and improper credential handling.
- Contribute security-focused improvements directly to the codebase.
- Develop and maintain internal security documentation, guidelines, and runbooks.
- Stay current on Linux security for containers, including namespaces, cgroups, seccomp, AppArmor, capabilities, and the OCI ecosystem.
- Participate in an on-call rotation as needed, including evenings, weekends, and holidays.

## Requirements
- 6+ years of experience in security engineering, application security, or a closely related discipline, with experience at a senior or staff level.
- Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience.
- Strong proficiency in Go and the ability to review and contribute to production-grade code.
- Deep understanding of Linux fundamentals relevant to container security, including namespaces, cgroups, capabilities, seccomp profiles, AppArmor/SELinux, rootless containers, and privilege boundaries.
- Strong understanding of OCI specifications and container runtime security, including runc, containerd, and BuildKit.
- Hands-on experience with identity and access management concepts, including OAuth 2.0, OIDC, token handling, and authentication flows.
- Experience with security design reviews, threat modeling, and secure development workflows.
- Familiarity with vulnerability management, CVE triage, CVSS scoring, coordinated disclosure, and external reporters.
- Strong written and verbal communication skills.

## Compensation & Equity
- Canada: CA$271,150–CA$434,000 + equity
- United States: $194,150–$312,950 + equity
- EU: €113,860–€186,780 + equity

## Benefits
- Flexible remote-first work
- Quarterly Whaleness Days and an end-of-year Whaleness break
- Home office setup
- 16 weeks of paid parental leave after 6 months of employment
- Technology stipend equivalent to $100 USD net per month
- PTO plan
- Training stipend for conferences, courses, and classes
- Equity participation
- Medical benefits, retirement, and holidays varying by country

## Similar jobs

- [Software Security Architect, Operating Systems | Consumer Devices](https://hotfix.jobs/jobs/eae7f6bf-7cf9-495a-9c46-fb88a4620a0f) - OpenAI - San Francisco, CA - $268k – $342k/yr
- [Safeguards Enforcement Lead, Cyber Harms](https://hotfix.jobs/jobs/c042fb99-fa5c-4740-9908-e14324222bde) - Anthropic - Washington, DC - $285k – $330k/yr
- [Cyber Operations Lead, Critical Harm Operations](https://hotfix.jobs/jobs/aece8b0b-4900-4762-87e1-025b2cbe75c9) - OpenAI - San Francisco, CA - $252k – $335k/yr
- [Lead Product GRC Subject Matter Expert](https://hotfix.jobs/jobs/57c937d5-05e3-4033-875a-890645c4aa6b) - Vanta - Remote - $230k – $270k/yr
- [Platform Security Engineer, DRTM / Secure Launch](https://hotfix.jobs/jobs/52321fb7-76c2-4b9b-b900-53a63bb68154) - Anthropic - San Francisco, CA - $320k – $405k/yr

**Apply:** https://hotfix.jobs/jobs/5fb072d9-8fb8-4689-ac6a-254007272295
**Canonical:** https://hotfix.jobs/jobs/5fb072d9-8fb8-4689-ac6a-254007272295