Senior Security Engineer

Job Summary

Driving offensive security initiatives, the full-time Senior Security Engineer will partner with cross-functional teams to conduct penetration testing, threat modeling, and exploit development while working remotely to enhance Docker's security posture across its products and infrastructure.

Key responsibilities

• Plan, scope, and execute penetration tests and red-team engagements against Docker's products and services
• Implement key security programs, including automated security design reviews and vulnerability management
• Develop proof-of-concept exploits and provide actionable remediation guidance based on risk-rated findings

Required qualifications

• 3+ years in security engineering with hands-on offensive security and penetration testing experience
• 2+ years of development experience in Python or Golang
• Deep expertise in authentication, authorization, and Zero Trust principles
• Strong experience securing cloud ecosystems such as AWS, GCP, or Azure
• Proficiency with offensive security tools and techniques, including Burp Suite and OWASP frameworks