Senior Security Engineer, Offensive Security

United States · Remotefull timeRemote

Apply on Employer Site

senior

$194k–$313k

H1B: no

Docker Senior Security Engineer, Offensive Security at Docker leads offensive security efforts by conducting penetration tests and adversary-emulation engagements. The role involves partnering with engineering and product teams to design and implement security architecture and controls across Docker products and platforms.

Responsibilities

Contribute to security initiatives that align with business goals, helping ensure security is a core component of our products and infrastructure
Support and help implement key security programs such as automated security design reviews, and vulnerability management
Build deep knowledge of software security and architecture, and act as a go-to resource for engineering teams
Partner with engineering to design and implement security architecture and controls across Docker products and platforms
Plan, scope, and execute penetration tests and red-team / adversary-emulation engagements against Docker's products and services
Develop proof-of-concept exploits and produce clear, risk-rated findings with actionable remediation guidance, then retest fixes to confirm closure
Build and maintain offensive security tooling and automation to expand testing coverage and repeatability
Perform security reviews and threat modeling (design, architecture, and code) across Docker products and services, including emerging AI products, and write automated security tests and exploits
Serve on rotating on-call schedule to respond to security events, investigate threats, and coordinate remediation efforts
Educate and collaborate with cross-functional teams (e.g., engineering, product) to promote security practices
Participate in Security Incident response

Qualification

Have 3+ years in security engineeringHave excellent communication skills

Required

Have 3+ years in security engineering, including hands-on offensive security and penetration testing across applications and infrastructure
Possess 2+ years of hands-on development experience in Python or Golang
Demonstrate deep expertise in authentication, authorization, including technologies like OAuth, cryptography applications and Zero Trust principles.
Have strong hands-on experience with securing cloud ecosystems (e.g. AWS, GCP, Azure)
Have hands-on penetration testing experience across SaaS web applications and APIs., including manual exploitation beyond automated scanners
Are proficient with offensive tooling and techniques such as. Burp Suite, and OWASP frameworks
Can write security tests and develop exploits and proof-of-concepts that find real vulnerabilities in a product
Understand AI/ML security risks and mitigations, including prompt injection, data poisoning, model extraction, and adversarial attacks
Have practical experience using LLMs and agentic tooling to automate vulnerability discovery, reconnaissance, and pentesting workflows
Have a track record of building security programs and automations from scratch, applying risk-based prioritization
Have experience performing security reviews and building or improving security review automation
Have excellent communication skills, allowing you to explain complex security concepts clearly to technical and non-technical stakeholders

Benefits

PTO
Equity/RSU
Parental Leave

Company

Docker

View company page

Source: ashby

Active within the past hour

Remote-friendly

More roles at Docker

Principal Product & Commercial Counsel

United States · Remote

Staff Software Engineer, Billing

Seattle, WA · Remote

Senior Principal Software Engineer, Networking

United States · Remote

Senior Event Operations Manager

United States · Remote

Boost Your Interview Chances

Improve Resume Match Score

Free

Your Score

9.0

Strong Applicant

Must-Have Skills for This Role

Have 3+ years in security engineeringHave excellent communication skills

Optimize my Resume

Apply Faster with Autofill

Free

Save your profile once. LumiJobs pre-fills the employer's application form so you stop re-typing the same answers on every site.

Apply With Autofill

Or skip LumiJobs's tools and submit directly on the employer's career site.

Apply on Employer Site