Docker, Inc
Senior Security Engineer, Offensive Security
United States · Senior · Full-time
No sponsorship$194k-$313kDetected 22 days ago
PythonGoAWSGCPAzureCloud PlatformsDockerKubernetesOAuthMachine LearningLLMsAgentic AICybersecurityPenetration TestingIncident ResponseComplianceZero TrustResearchLeadershipCommunicationCollaborationMicrosoft OfficeBurp Suite
Stay score
odds of building a lasting career here
59Sponsors, lottery-bound
Cap-exempt (no lottery)0
Sponsors this role80
Entry-level history0
PERM / green-card track0
Lottery odds (Level IV)94
Fits your clock70
Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Files H-1B transfers
5 transfer filings in the last year, covering 5 workers. Median labor-condition decision: 7 days. An employer that already files transfers is one that can take over an existing H-1B.
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- ABOUT DOCKER Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls.
- You'll apply your expertise in penetration testing, threat modeling, and exploit development to find and eliminate risks across Docker products and infrastructure.
- This role offers the opportunity to help improve security programs at a company whose products are trusted by millions of developers worldwide.
Responsibilities
- Support and help implement key security programs such as automated security design reviews, and vulnerability management
- Build deep knowledge of software security and architecture, and act as a go-to resource for engineering teams
- Partner with engineering to design and implement security architecture and controls across Docker products and platforms
- Develop proof-of-concept exploits and produce clear, risk-rated findings with actionable remediation guidance, then retest fixes to confirm closure
- Perform security reviews and threat modeling (design, architecture, and code) across Docker products and services, including emerging AI products, and write automated security tests and exploits
- Educate and collaborate with cross-functional teams (e.g., engineering, product) to promote security practices
- Flexibility that fits your life - We trust you to manage your schedule while delivering great work.
- We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives.
- We believe diverse teams build better products, make better decisions, and better serve our global community.
Requirements
- Have 3+ years in security engineering, including hands-on offensive security and penetration testing across applications and infrastructure
- Possess 2+ years of hands-on development experience in Python or Golang
- Demonstrate deep expertise in authentication, authorization, including technologies like OAuth, cryptography applications and Zero Trust principles.
- Have strong hands-on experience with securing cloud ecosystems (e.g. AWS, GCP, Azure)
- Have experience with container escape, Kubernetes attack paths, or cloud red teaming
- Have experience testing AI/ML systems for issues like prompt injection, model extraction, and data poisoning
- Have hands-on penetration testing experience across SaaS web applications and APIs., including manual exploitation beyond automated scanners
- Are proficient with offensive tooling and techniques such as. Burp Suite, and OWASP frameworks
- Can write security tests and develop exploits and proof-of-concepts that find real vulnerabilities in a product
- Understand AI/ML security risks and mitigations, including prompt injection, data poisoning, model extraction, and adversarial attacks
- Have practical experience using LLMs and agentic tooling to automate vulnerability discovery, reconnaissance, and pentesting workflows
- Have a track record of building security programs and automations from scratch, applying risk-based prioritization
- Have experience performing security reviews and building or improving security review automation
- Have excellent communication skills, allowing you to explain complex security concepts clearly to technical and non-technical stakeholders
- Understand industry standards, and actively keep up with emerging security technologies and models
- Are a team player who drives security change via collaboration and cross-functional partnerships
Compensation
- Review risk registry and annual roadmap
Benefits
- Time to recharge - Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break.
- Home office support - Set up your workspace for comfort and success.
- Technology stipend - Equivalent to US$100 net per month to help support your work.
- Learning & development - Annual stipend for conferences, courses, certifications, and continued learning.
- Parental leave - 16 weeks of paid parental leave after six months of employment.
- Equity for all full-time employees - Share in Docker's long-term success as we continue to grow.
- Comprehensive benefits - Medical, retirement, and paid holidays vary by country.
- Build and maintain offensive security tooling and automation to expand testing coverage and repeatability
Equal opportunity
- equal opportunity employer.
Visa & Work Authorization
- Docker does not offer visa sponsorship for this role.
Apply directly at Docker, Inc →Create a free account for alerts like thisView Docker, Inc immigration profile
This listing is sourced directly from Docker, Inc's careers page and normalized into a canonical job model.