Senior Software Engineer, Security, Docker Desktop

Jobgether; Oregon; Hybrid; USD 194,000 - 313,000; Full time

Benefits offered by this job

Equity participation

Remote-first environment

Flexible working arrangements

Home office support

Technology stipend

Job summary

Jobgether, partnering with a United States‑based company, seeks a Senior Software Engineer focused on security for Docker Desktop. You will write production Go code, strengthen authentication and container isolation, and work within a distributed engineering and security team to push secure-by-default design across the product.

You will model threats, review security designs, and coordinate CVE responses while contributing to security docs and engineering runbooks.

Qualifications

• At least 6 years of professional software engineering experience, with exposure to security‑sensitive systems or strong interest in cybersecurity.
• Strong proficiency in Go, with production‑grade software experience.
• Solid understanding of Linux fundamentals related to container security (namespaces, cgroups, seccomp, AppArmor, capabilities).
• Familiarity with OCI specs, container runtime architecture, and supporting technologies.
• Knowledge of identity and access management including OAuth 2.0 and OIDC.
• Experience in security architecture reviews, threat modeling, and vulnerability management.
• Ability to balance security requirements with product functionality and performance.
• Strong engineering fundamentals: code quality, reliability, scalability, and secure development practices.
• Proven ownership of technical initiatives from assessment to implementation.
• Excellent written and verbal communication bridging security and product teams.
• Analytical mindset and proactive improvement approach.
• Ability to work independently in a distributed remote environment.

Responsibilities

• Contribute Go code focusing on security-sensitive components like authentication flows and container runtime behavior.
• Embed security considerations into daily engineering work with secure defaults and protections.
• Participate in design discussions and code reviews to identify security risks and propose mitigations.
• Conduct threat modeling and security reviews for new capabilities involving authentication and container security.
• Liaise between Desktop engineering and central security organization to translate policies into engineering decisions.
• Manage CVEs and coordinate remediation across teams with external researchers.
• Oversee vulnerability disclosure processes and maintain security documentation and runbooks.
• Monitor Linux/container security developments (namespaces, cgroups, seccomp, AppArmor, capabilities, OCI standards).
• Identify opportunities to strengthen container isolation and authentication mechanisms.
• Foster cross‑team collaboration and security awareness across the software development lifecycle.

Skills

Go

Linux security

OCI specs

IAM concepts

Threat modeling

CVEs

Code quality

Ownership

Communication

Problem solving

Tools

OCI specifications

Container runtime

OpenID Connect

OAuth 2.0

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Software Engineer, Security, Docker Desktop based in the United States.

We are seeking an experienced Software Engineer with a strong passion for cybersecurity to strengthen the security of a widely adopted, cross‑platform developer platform. In this role, you will work directly within the Desktop engineering team, integrating security principles into product development and ensuring secure‑by‑default experiences. You will contribute production‑grade Go code while focusing on critical areas such as authentication, authorization, container isolation, and Linux security. Working closely with engineering and security specialists, you will identify vulnerabilities, assess potential threats, and implement effective solutions. You will also influence architectural decisions, improve security workflows, and promote secure development practices across the engineering organization. This is an opportunity to make a meaningful impact on tools used by millions of developers worldwide while working in a collaborative, globally distributed, remote‑first environment.

Accountabilities:

• Contribute directly to the product codebase using Go, focusing on security‑sensitive components such as authentication flows, privilege boundaries, and container runtime behavior.
• Integrate security considerations into everyday engineering activities, ensuring new features are developed with secure defaults and robust protection mechanisms.
• Participate in technical design discussions and code reviews, identifying potential security risks and recommending improvements before features are released.
• Conduct threat modeling and security design reviews for new and evolving product capabilities, particularly those involving authentication, authorization, identity management, and container runtime security.
• Act as the primary liaison between the Desktop engineering team and the central security organization, translating security policies and recommendations into practical engineering decisions.
• Manage incoming vulnerability reports and Common Vulnerabilities and Exposures (CVEs), including validating reported issues, assessing severity, reproducing vulnerabilities, and coordinating remediation.
• Oversee vulnerability disclosure processes, collaborating with external security researchers and internal engineering teams to establish appropriate timelines and ensure vulnerabilities are addressed effectively.
• Develop, maintain, and improve internal security documentation, engineering guidelines, procedures, and operational runbooks.
• Monitor developments in Linux and container security, including namespaces, cgroups, seccomp, AppArmor, Linux capabilities, and evolving Open Container Initiative (OCI) standards.
• Identify opportunities to strengthen container isolation, authentication mechanisms, and overall product security through continuous technical improvements.
• Build strong relationships across engineering and security teams, encouraging collaboration and integrating security awareness throughout the software development lifecycle.

Requirements:

• At least 6 years of professional software engineering experience, with meaningful exposure to security‑sensitive systems or a strong demonstrated interest in cybersecurity.
• Strong proficiency in Go, with proven experience developing, maintaining, and delivering production‑grade software.
• Solid understanding of Linux fundamentals relevant to container security, including namespaces, cgroups, Linux capabilities, seccomp profiles, AppArmor, SELinux, rootless containers, and privilege boundaries.
• Familiarity with OCI specifications, container runtime architecture, and the underlying technologies supporting containerized applications.
• Working knowledge of identity and access management concepts, including OAuth 2.0, OpenID Connect (OIDC), token management, authentication, and authorization workflows.
• Experience or familiarity with security architecture reviews and threat modeling, with the ability to identify potential vulnerabilities and recommend appropriate mitigation strategies.
• Understanding of vulnerability management processes, including CVE triage, CVSS severity scoring, coordinated vulnerability disclosure, and collaboration with external security researchers.
• Ability to balance security requirements with product functionality, performance, maintainability, and practical engineering constraints.
• Strong software engineering fundamentals, with a focus on code quality, reliability, scalability, and secure development practices.
• Proven ability to take ownership of technical initiatives, investigate complex security issues, and drive solutions from initial assessment through implementation.
• Excellent written and verbal communication skills, with the ability to explain complex security concepts and bridge collaboration between dedicated security specialists and product engineering teams.
• Strong analytical and problem‑solving abilities, combined with technical curiosity and a proactive approach to continuous improvement.
• Ability to work independently while contributing effectively to a collaborative, globally distributed engineering environment.

Benefits:

• Annual base salary ranging from US$194,150 to US$312,950, depending on experience, skills, qualifications, and location.
• Equity participation for all full‑time employees.
• Remote‑first working environment: Work from home, with access to offices in Seattle and Paris for collaboration and team connection.
• Flexible working arrangements: Freedom to organize your schedule while maintaining strong performance and delivery.
• Generous paid time off: Vacation allowance, quarterly Whaleness Days, and a dedicated end‑of‑year wellness break.
• Home office support: Resources to create a comfortable and productive remote working environment.
• Technology stipend: Monthly allowance equivalent to US$100 net to support work‑related technology needs.
• Learning and development: Annual professional development budget for conferences, courses, certifications, and continued education.
• Parental leave: 16 weeks of paid parental leave after six months of employment.
• Comprehensive benefits: Medical coverage, retirement benefits, and paid holidays.
• Company merchandise: Access to branded merchandise and team swag.
• International collaboration: Opportunity to work with a globally distributed team of experienced engineers and security professionals.
• Visa sponsorship: Considered on a case‑by‑case basis, depending on business needs.