England•Portugal•Spain•Italy•Germany
Remote
Senior
Full Time
💰€118,860 - €169,800
remote-firstsecurityoffensive securitypenetration testingAI securitycloud security
Requirements
- •3+ years in security engineering, including hands-on offensive security and penetration testing across applications and infrastructure
- •2+ years of hands-on development experience in Python or Golang
- •Deep expertise in authentication, authorization, including technologies like OAuth, cryptography applications and Zero Trust principles
- •Strong hands-on experience with securing cloud ecosystems (e.g. AWS, GCP, Azure)
- •Hands-on penetration testing experience across SaaS web applications and APIs, including manual exploitation beyond automated scanners
- •Proficient with offensive tooling and techniques such as Burp Suite, and OWASP frameworks
- •Can write security tests and develop exploits and proof-of-concepts that find real vulnerabilities in a product
- •Understand AI/ML security risks and mitigations, including prompt injection, data poisoning, model extraction, and adversarial attacks
- •Practical experience using LLMs and agentic tooling to automate vulnerability discovery, reconnaissance, and pentesting workflows
- •Track record of building security programs and automations from scratch, applying risk-based prioritization
- •Experience performing security reviews and building or improving security review automation
- •Excellent communication skills, allowing you to explain complex security concepts clearly to technical and non-technical stakeholders
- •Understand industry standards, and actively keep up with emerging security technologies and models
- •Team player who drives security change via collaboration and cross-functional partnerships
- •Hold offensive security certifications such as OSCP, OSWE, OSEP, GXPN, GPEN, or CRTO
- •Have published CVEs, original security research, or conference talks
What You'll Do
- •Contribute to security initiatives that align with business goals
- •Support and help implement key security programs such as automated security design reviews, and vulnerability management
- •Build deep knowledge of software security and architecture, and act as a go-to resource for engineering teams
- •Partner with engineering to design and implement security architecture and controls across Docker products and platforms
- •Plan, scope, and execute penetration tests and red-team / adversary-emulation engagements against Docker's products and services
- •Develop proof-of-concept exploits and produce clear, risk-rated findings with actionable remediation guidance, then retest fixes to confirm closure
- •Build and maintain offensive security tooling and automation to expand testing coverage and repeatability
- •Perform security reviews and threat modeling (design, architecture, and code) across Docker products and services, including emerging AI products, and write automated security tests and exploits
- •Serve on rotating on-call schedule to respond to security events, investigate threats, and coordinate remediation efforts
- •Educate and collaborate with cross-functional teams (e.g., engineering, product) to promote security practices
- •Participate in Security Incident response
Nice to Have
- •Experience with container escape, Kubernetes attack paths, or cloud red teaming
- •Experience testing AI/ML systems for issues like prompt injection, model extraction, and data poisoning
Benefits
- •Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration
- •Flexibility that fits your life – We trust you to manage your schedule while delivering great work
- •Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break
- •Home office support – Set up your workspace for comfort and success
- •Technology stipend – Equivalent to US$100 net per month to help support your work
- •Learning & development – Annual stipend for conferences, courses, certifications, and continued learning
- •Parental leave – 16 weeks of paid parental leave after six months of employment
- •Equity for all full-time employees – Share in Docker's long-term success as we continue to grow
- •Comprehensive benefits – Medical, retirement, and paid holidays vary by country
- •Docker swag – Because representing the whale never gets old
About Docker
Docker’s platform helps millions of developers efficiently and collaboratively build, share, and run applications.
Palo Alto, CA
500 - 1000
Developer Tools