Senior Offensive Security Engineer – Remote

Docker; United States; Remote; USD 188,000 - 313,000; Full time

Benefits offered by this job

Remote-first by design

Flexibility that fits your life

Time to recharge

Home office support

Technology stipend – US$100 net per月

Learning & development

Parental leave – 16 weeks

Equity for all full-time employees

Comprehensive benefits

Docker swag

Job summary

Docker seeks a Senior Security Engineer, Offensive Security, to drive adversarial testing across products and cloud infrastructure. You will partner with engineering to implement secure architecture, perform penetration tests, and develop PoCs with actionable remediation.

You will work across AWS, GCP, Azure, AI/ML products, and design security tests, tooling, and automation to scale security coverage. Visa sponsorship is not offered for this role.

Qualifications

• 3+ years in security engineering, including hands-on offensive security and penetration testing across applications and infrastructure
• 2+ years of hands-on development experience in Python or Golang
• Deep expertise in authentication/authorization, including OAuth, cryptography and Zero Trust
• Strong hands-on experience with securing cloud ecosystems (AWS, GCP, Azure)
• Penetration testing across SaaS web applications and APIs, including manual exploitation beyond automated scanners
• Proficiency with offensive tooling and techniques such as Burp Suite and OWASP frameworks
• Ability to write security tests and develop exploits to find real vulnerabilities
• Understanding AI/ML security risks and mitigations

Responsibilities

• Contribute to security initiatives aligned with business goals and ensure security is a core component
• Support and implement key security programs like automated design reviews and vulnerability management
• Build deep knowledge of software security and architecture as a go-to resource for engineering
• Collaborate with engineering to design and implement security architecture and controls
• Plan, scope, and execute pen tests and red-team/adversary emulation engagements
• Develop PoC exploits and provide risk-rated findings with remediation guidance
• Build and maintain offensive security tooling and automation for test coverage
• Perform security reviews and threat modeling across Docker products including AI components
• Participate in on-call rotations and incident response coordination
• Educate cross-functional teams to promote secure practices and design by security

Skills

Penetration testing

Threat modeling

Exploit development

Python / Golang development

Cloud security (AWS/GCP/Azure)

Offensive security tooling

Security testing automation

AI/ML security awareness

Security program building

Communication with stakeholders

Tools

Burp Suite

OWASP frameworks

Job description

Docker seeks a Senior Security Engineer, Offensive Security, to drive adversarial testing across products and cloud infrastructure. You will partner with engineering to implement secure architecture, perform penetration tests, and develop PoCs with actionable remediation.

You will work across AWS, GCP, Azure, AI/ML products, and design security tests, tooling, and automation to scale security coverage. Visa sponsorship is not offered for this role.