Remote-First Senior Security Engineer: Offensive Security

Docker, Inc.; United Kingdom; Remote; EUR 90,000 - 130,000; Full time

Job summary

Docker is seeking a Senior Security Engineer, Offensive Security, to drive offensive security across Docker products and cloud infrastructure. You will lead penetration tests, threat modeling, and exploit development, partnering with engineering to implement durable fixes and secure architectures.

You'll work across AWS, GCP, Azure, AI/ML products, and containerized environments, building automated tests and repeatable security processes in a fast-paced environment.

Qualifications

• 3+ years in security engineering, including hands-on offensive security and penetration testing across apps and infrastructure.
• 2+ years of hands-on development experience in Python or Golang.
• Deep expertise in authentication, authorization, including OAuth, cryptography, and Zero Trust.
• Strong hands-on experience securing cloud ecosystems (AWS, GCP, Azure).
• Penetration testing across SaaS web apps and APIs, including manual exploitation.
• Proficient with offensive tooling and techniques such as Burp Suite and OWASP.
• Ability to write security tests and develop exploits/PoCs that find real vulnerabilities.

Responsibilities

• Contribute to security initiatives aligned with business goals; ensure security is a core product ingredient.
• Plan, scope, and perform penetration tests and red-team / adversary-emulation engagements.
• Develop exploitable PoCs and provide actionable remediation guidance.
• Build and maintain offensive security tooling and automation to expand coverage.
• Conduct threat modeling and security reviews across Docker products and AI initiatives.
• Collaborate with engineering to design secure architecture and controls.

Skills

Security engineering

Penetration testing

Python or Go

OAuth & Zero Trust

Cloud security (AWS/GCP/Azure)

Exploitation & PoCs

Offensive tooling & OWASP

Tools

Burp Suite

Job description

Docker is seeking a Senior Security Engineer, Offensive Security, to drive offensive security across Docker products and cloud infrastructure. You will lead penetration tests, threat modeling, and exploit development, partnering with engineering to implement durable fixes and secure architectures.

You'll work across AWS, GCP, Azure, AI/ML products, and containerized environments, building automated tests and repeatable security processes in a fast-paced environment.