Senior Offensive Security Engineer - Remote-First

Docker; United States; Remote; USD 150,000 - 190,000; Full time

Job summary

Docker is seeking a Senior Security Engineer, Offensive Security, to drive offensive testing across products and cloud infrastructure. You will partner with engineering, product, and leadership to surface risks and shape secure design.

You will perform penetration testing, threat modeling, and exploit development, building automation and tooling while contributing to security programs. This fast-paced role includes on-call rotations and collaboration across cloud platforms and AI/ML initiatives.

Responsibilities

• Contribute to security initiatives aligned with business goals, ensuring security is a core component of our products and infrastructure.
• Support and help implement key security programs such as automated security design reviews and vulnerability management.
• Build deep knowledge of software security and architecture, and act as a go-to resource for engineering teams.
• Partner with engineering to design and implement security architecture and controls across Docker products and platforms.
• Plan, scope, and execute penetration tests and red-team / adversary-emulation engagements against Docker's products and services.
• Develop proof-of-concept exploits and produce clear, risk-rated findings with actionable remediation guidance, then retest fixes to confirm closure.
• Build and maintain offensive security tooling and automation to expand testing coverage and repeatability.
• Perform security reviews and threat modeling across Docker products and services, including emerging AI products, and write automated security tests and exploits.
• Serve on rotating on-call schedule to respond to security incidents.

Job description

Docker is seeking a Senior Security Engineer, Offensive Security, to drive offensive testing across products and cloud infrastructure. You will partner with engineering, product, and leadership to surface risks and shape secure design.

You will perform penetration testing, threat modeling, and exploit development, building automation and tooling while contributing to security programs. This fast-paced role includes on-call rotations and collaboration across cloud platforms and AI/ML initiatives.