Senior Software Engineer, Security, Docker Desktop

Job Overview

We are looking for an experienced Software Engineer with a strong passion for security to help strengthen the security and resilience of a widely used, cross-platform developer platform. In this role, you will work within the Desktop engineering team, integrating security best practices directly into product development rather than acting solely as an external security reviewer. You will contribute production-grade Go code while addressing critical areas such as authentication, authorization, container isolation, and Linux security. Working closely with product engineers and security specialists, you will help identify vulnerabilities, assess risks, and implement practical solutions. You will also influence technical decisions, improve security processes, and promote secure engineering practices across the development lifecycle. This is an opportunity to make a direct impact on tools used by millions of developers in a globally distributed, remote-first environment.

Accountabilities

• Contribute directly to the product codebase using Go, focusing on security-sensitive components such as authentication flows, privilege boundaries, and container runtime behavior.
• Integrate security considerations into everyday engineering activities, ensuring that product features are designed and developed with secure defaults.
• Participate in technical design discussions and code reviews, providing security-focused feedback and identifying potential risks before features reach production.
• Conduct threat modeling and security design assessments for new and existing product capabilities, particularly those involving authentication, authorization, identity management, and container runtime security.
• Act as the primary point of contact between the Desktop engineering team and the central security organization, translating security policies and recommendations into practical engineering solutions.
• Manage incoming vulnerability reports and Common Vulnerabilities and Exposures (CVEs), including validating reported issues, assessing severity, reproducing vulnerabilities, and coordinating remediation efforts.
• Oversee vulnerability disclosure processes, working with external security researchers and internal engineering teams to establish appropriate timelines and ensure issues are resolved effectively.
• Develop, maintain, and improve internal security documentation, engineering guidelines, procedures, and operational runbooks.
• Stay informed about developments in Linux and container security, including namespaces, cgroups, seccomp, AppArmor, Linux capabilities, and evolving Open Container Initiative (OCI) standards.
• Identify opportunities to strengthen container isolation, authentication mechanisms, and overall product security through continuous technical improvements.
• Build strong working relationships across engineering and security teams, encouraging collaboration and promoting security awareness throughout the development process.

Requirements

• At least 6 years of professional software engineering experience, with meaningful exposure to security-sensitive systems or a strong demonstrated interest in application and infrastructure security.
• Strong proficiency in Go, with proven experience developing, maintaining, and delivering production-grade software.
• Solid understanding of Linux fundamentals relevant to container security, including namespaces, cgroups, Linux capabilities, seccomp profiles, AppArmor, SELinux, rootless containers, and privilege boundaries.
• Familiarity with OCI specifications, container runtime architecture, and the underlying technologies that support containerized applications.
• Working knowledge of identity and access management concepts, including OAuth 2.0, OpenID Connect (OIDC), token management, authentication, and authorization workflows.
• Experience or familiarity with security architecture reviews and threat modeling, with the ability to identify potential vulnerabilities and recommend appropriate mitigation strategies.
• Understanding of vulnerability management processes, including CVE triage, CVSS severity scoring, coordinated vulnerability disclosure, and collaboration with external security researchers.
• Ability to balance security requirements with product functionality, performance, maintainability, and practical engineering constraints.
• Strong software development fundamentals, with an engineering-first mindset and a commitment to writing reliable, maintainable, and secure code.
• Excellent written and verbal communication skills, with the ability to explain complex security concepts and bridge collaboration between dedicated security specialists and product engineering teams.
• Strong problem-solving skills, technical curiosity, and the ability to take ownership of security-related initiatives from investigation through implementation.
• A proactive and collaborative approach, with the ability to work independently while contributing effectively within a globally distributed engineering organization.