Senior Security Engineer - Desktop (Go) | Remote & Equity

Docker, Inc; Italia; Remote; EUR 114,000 - 187,000; Full time

Benefits offered by this job

Remote-first

Flexible schedule

PTO

Home office support

Tech stipend

Learning stipend

Parental leave

Equity

Benefits package

Company swag

Job summary

Docker, Inc is seeking a security-focused software engineer to join the Desktop engineering team. You will contribute Go code with a security lens, perform threat modeling, and coordinate vulnerability response across the organization.

You will collaborate with the security group and product teams to strengthen authentication, authorization, and container isolation, while staying up-to-date with the Linux security landscape relevant to containers.

Qualifications

• 6+ years of software engineering experience with a security focus.
• Strong proficiency in Go with production-grade code.
• Solid Linux fundamentals relevant to container security (namespaces, cgroups, capabilities, seccomp, AppArmor/SELinux, rootless containers).
• Familiarity with OCI specifications and container runtime internals.
• Working knowledge of identity and access management concepts (OAuth 2.0, OIDC, token handling, and auth flows).
• Comfort participating in security design reviews and threat modeling.
• Familiarity with vulnerability management processes: CVE triage and coordinated disclosure.
• Strong written and verbal communication to bridge security and product engineering teams.

Responsibilities

• Contribute to the Docker Desktop codebase in Go, focusing on security-sensitive areas such as authentication flows, privilege boundaries, and container runtime behavior.
• Participate in design and code reviews across the team, bringing a security perspective to features before they ship.
• Conduct threat modeling and security design reviews for new and evolving product features, focusing on authentication, authorization, and container runtime security.
• Serve as the team’s liaison to the security group, translating policy into engineering decisions.
• Act as the first point of contact for vulnerability reports and CVEs: validate severity, reproduce issues, coordinate disclosure timelines, and drive remediation.
• Develop and maintain internal security documentation, guidelines, and runbooks.
• Stay current on the Linux security landscape as it pertains to containers: namespaces, cgroups, seccomp, AppArmor, capabilities, and the OCI ecosystem.

Skills

Go proficiency

Linux security

OCI/container lifecycle

Identity & access mgmt (OAuth 2.0, OID

Threat modeling

Security reviews

Vulnerability management

Job description

Docker, Inc is seeking a security-focused software engineer to join the Desktop engineering team. You will contribute Go code with a security lens, perform threat modeling, and coordinate vulnerability response across the organization.

You will collaborate with the security group and product teams to strengthen authentication, authorization, and container isolation, while staying up-to-date with the Linux security landscape relevant to containers.