Senior Security Engineer, Detection & Response

Docker, Inc; United States; Remote; USD 100,000 - 130,000; Full time

Job summary

Docker, Inc. is seeking a Senior Security Engineer for their Detection and Response team. This remote role focuses on enhancing security visibility and threat detection through log pipeline development and incident response. Candidates should have a strong background in information security with hands-on experience in detection and response in SaaS environments. Join a passionate team dedicated to innovation and developer experiences.

Benefits

Freedom & flexibility; fit your work around your life

16 weeks of paid Parental leave

Technology stipend equivalent to $100 net/month

PTO plan that encourages you to take time off

Training stipend for conferences, courses and classes

Equity in the company

Medical benefits, retirement and holidays vary by country

Qualifications

• 4-5 years of hands-on experience in detection and response in enterprise SaaS environments.
• Proven experience in building log ingestion and normalization pipelines.
• Expertise in Detection as Code using Python and SQL.

Responsibilities

• Monitor, detect, and respond to cybersecurity threats.
• Design and maintain log ingestion and normalization pipelines.
• Work with cross-functional teams to enhance security posture.

Skills

Detection as Code

Incident Response

Log Ingestion

Automation

Threat Detection

Forensics

Education

Background in Information Security, Computer Science, or equivalent

Tools

Terraform

Kubernetes

Job description

Senior Security Engineer, Detection & Response

Join to apply for the Senior Security Engineer, Detection & Response role at Docker, Inc

Senior Security Engineer, Detection & Response

Join to apply for the Senior Security Engineer, Detection & Response role at Docker, Inc

At Docker, we make app development easier so developers can focus on what matters. Our remote-first team spans the globe, united by a passion for innovation and great developer experiences. With over 20 million monthly users and 20 billion image pulls, Docker is the #1 tool for building, sharing, and running apps—trusted by startups and Fortune 100s alike. We’re growing fast and just getting started. Come join us for a whale of a ride!

At Docker, we help developers bring their ideas to life by conquering the complexity of app development. Through an integrated development pipeline and application components, we simplify and accelerate workflows, empowering developers worldwide.

Docker’s Security Team is committed to protecting both our organization and our customers. The Detection and Response Team plays a critical role in identifying, analyzing, and mitigating threats across Docker’s infrastructure. We are now seeking a Senior Detection and Response Engineer with expertise in log pipeline generation to enhance security visibility, threat detection, and response capabilities. This role will lead threat detection, investigation, and automation efforts while working closely with IT, Security & Compliance, and Engineering teams to build high-fidelity security telemetry and enable real-time threat detection, incident response, and forensic analysis.

Responsibilities:

• Detection as Code & Incident Response – Monitor, detect, and respond to cybersecurity threats, lead incident investigations, conduct root cause analysis, and automate threat detection and hunting. Develop detection and response playbooks and participate in on-call rotations.
• Log Pipeline Development & Optimization – Design, implement, and maintain log ingestion, parsing, and normalization pipelines across endpoint, network, cloud, and application logs. Ensure log consistency across EDR, SIEM, SOAR, and threat detection tools.
• Automation & Infrastructure as Code (IaC) – Use Terraform, Kubernetes, and scripting to automate log infrastructure in cloud environments and improve security monitoring efficiency.
• Compliance & Data Retention – Ensure log storage and retention meet regulatory and security requirements, support audit to maintain compliance
• Cross-Team Collaboration & Security Strategy – Work with Product Security, Infrastructure, DevOps, and IT on various initiatives to mature the Detection Engineering program and strengthen Docker’s overall security posture. Partner with stakeholders to improve threat intelligence, detection, and incident response capabilities.
  
  

Qualifications:

• Background in Information Security, Computer Science, Computer Engineering, Forensics, or equivalent work experience.
• 4-5 years of hands-on experience in detection and response, including triage and incident response in enterprise SaaS environments.
• Proven experience in building log ingestion and normalization pipelines across diverse systems.
• Expertise in Detection as Code, particularly using Python and SQL.
• Subject matter expert in endpoint security and/or cloud security.
• Strong working knowledge of Mac, Linux, and Windows operating systems.
• Hands-on experience with major cloud infrastructures, including AWS, Azure, and GCP.
• Experience with Kubernetes is a nice-to-have.
• Demonstrated experience working across multiple teams in collaborative security roles.
  
  

What To Expect In The First 30 Days

• Understand Docker’s infrastructure and identify gaps in the current Detection Engineering program.
• Establish and build collaborative relationships with key security stakeholders.
• Coordinate and support security incident investigations.
  
  

What To Expect In The First 90 Days

• Develop a roadmap for log development and optimization.
• Drive log ingestion and alerting improvements in SIEM and other security tools.
• Refine existing playbooks with a fresh perspective.
• Participate in security on-call rotation.
  
  

What To Expect In The First Year

• Become a key partner within Docker’s cross-functional Security team.
• Own and mature one or more Detection & Response initiatives.
• Help shape Docker’s security roadmap and its interconnection with Engineering.
• Lead educational initiatives to strengthen Docker’s security posture company-wide.
  
  

We use Covey as part of our hiring and / or promotional process for jobs in NYC and certain features may qualify it as an AEDT. As part of the evaluation process we provide Covey with job requirements and candidate submitted applications. We began using Covey Scout for Inbound on April 13, 2024.

Please see the independent bias audit report covering our use of Covey here.

Perks (for Full-Time Employees Only)

• Freedom & flexibility; fit your work around your life
• Designated quarterly Whaleness Days
• Home office setup; we want you comfortable while you work
• 16 weeks of paid Parental leave
• Technology stipend equivalent to $100 net/month
• PTO plan that encourages you to take time to do the things you enjoy
• Quarterly, company-wide hackathons
• Training stipend for conferences, courses and classes
• Equity; we are a growing start-up and want all employees to have a share in the success of the company
• Docker Swag
• Medical benefits, retirement and holidays vary by country
  
  

Docker embraces diversity and equal opportunity. We are committed to building a team that represents a variety of backgrounds, perspectives, and skills. The more inclusive we are, the better our company will be.

Due to the remote nature of this role, we are unable to provide visa sponsorship.

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

• Industries

  Hospitals and Health Care, Non-profit Organizations, and Government Administration

Referrals increase your chances of interviewing at Docker, Inc by 2x

Get notified about new Senior Security Engineer jobs in United States.

Senior/ Staff Security Engineer, Detection and Response

Senior Security Engineer (CrowdStrike Falcon Platform)– Remote (USA)

Part-Time Contract SOC 2 & Security Compliance Engineer (Remote)

IT Cybersecurity Architect, FCH - IT - SECURITY

DHS HSEN - Senior Security Engineer (Process Improvement)

United States $100,000.00-$130,000.00 2 weeks ago

Senior Offensive Security Researcher, Columbia MD or Denver, CO, Relo avail, US Cit, clearance eligible - Principal Security Engineer

United States $120,000.00-$150,000.00 2 weeks ago

Jersey City, NJ $150,000.00-$275,000.00 2 weeks ago

Senior Security Architect - (Runtime & OS-Level Security)

Senior Security Analyst – Incident Response

Lead Security Engineer & Data Protection Officer (DPO)

DHS HSEN – Senior Security Tools Engineer

United States $110,000.00-$130,000.00 2 weeks ago

Senior Architect, Security, Field CTO Office

Senior Security Sales Engineer - North Central region (Remote in Cincinnati, OH)

Security Architect - North Central region (Remote in Chicago, IL)

Senior Security Sales Engineer - North Central region (Remote in Minneapolis, MN)

United States $93,000.00-$167,400.00 6 days ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.