About this role
ABOUT DOCKER
Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout.
We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default.
_______________________________________________________________________
THE ROLE
You are a software engineer who cares deeply about security. Embedded in the Desktop engineering team, you will bring an engineering-first perspective to the security of a complex, cross-platform product built at the intersection of identity, OCI runtimes, and Linux kernel internals. You will read and write Go, participate in feature development, and make security a first-class concern from the inside out: not as an outside reviewer, but as a contributing member of the team.
This role is for someone who is primarily a builder, and who applies that builder’s instinct to making Docker Desktop more secure by default.
_______________________________________________________________________
RESPONSIBILITIES
- Contribute to the Docker Desktop codebase in Go, with a focus on security-sensitive areas such as authentication flows, privilege boundaries, and container runtime behavior.
- Participate in design and code reviews across the team, bringing a security perspective to features before they ship.
- Conduct threat modeling and security design reviews for new and evolving product features, with particular focus on authentication, authorization, and container runtime security.
- Serve as the team’s primary liaison to the organization’s security group, attending security syncs and translating central policy into practical engineering decisions.
- Act as the first point of contact for incoming vulnerability reports and CVEs: validate severity, reproduce issues, coordinate disclosure timelines, and drive remediation with the relevant engineers.
- Develop and maintain internal security documentation, guidelines, and runbooks for the team.
- Stay current on the Linux security landscape as it pertains to containers: namespaces, cgroups, seccomp, AppArmor, capabilities, and the evolving OCI ecosystem.
_______________________________________________________________________
QUALIFICATIONS
- 6+ years of software engineering experience, with meaningful exposure to security-sensitive systems or a strong personal interest in security.
- Strong proficiency in Go, with a track record of writing and shipping production-grade code.
- Solid understa