Senior Software Engineer, Security, Docker Desktop

Accountabilities:

Contribute directly to the product codebase using Go, focusing on security-sensitive components such as authentication flows, privilege boundaries, and container runtime behavior.
Integrate security considerations into everyday engineering activities, ensuring that product features are designed and developed with secure defaults.
Participate in technical design discussions and code reviews, providing security-focused feedback and identifying potential risks before features reach production.
Conduct threat modeling and security design assessments for new and existing product capabilities, particularly those involving authentication, authorization, identity management, and container runtime security.
Act as the primary point of contact between the Desktop engineering team and the central security organization, translating security policies and recommendations into practical engineering solutions.
Manage incoming vulnerability reports and Common Vulnerabilities and Exposures (CVEs), including validating reported issues, assessing severity, reproducing vulnerabilities, and coordinating remediation efforts.
Oversee vulnerability disclosure processes, working with external security researchers and internal engineering teams to establish appropriate timelines and ensure issues are resolved effectively.
Develop, maintain, and improve internal security documentation, engineering guidelines, procedures, and operational runbooks.
Stay informed about developments in Linux and container security, including namespaces, cgroups, seccomp, AppArmor, Linux capabilities, and evolving Open Container Initiative (OCI) standards.
Identify opportunities to strengthen container isolation, authentication mechanisms, and overall product security through continuous technical improvements.
Build strong working relationships across engineering and security teams, encouraging collaboration and promoting security awareness throughout the development process.
Requirements:
At least 6 years of professional software engineering experience, with meaningful exposure to security-sensitive systems or a strong demonstrated interest in application and infrastructure security.
Strong proficiency in Go, with proven experience developing, maintaining, and delivering production-grade software.
Solid understanding of Linux fundamentals relevant to container security, including namespaces, cgroups, Linux capabilities, seccomp profiles, AppArmor, SELinux, rootless containers, and privilege boundaries.
Familiarity with OCI specifications, container runtime architecture, and the underlying technologies that support containerized applications.
Working knowledge of identity and access management concepts, including OAuth 2.0, OpenID Connect (OIDC), token management, authentication, and authorization workflows.
Experience or familiarity with security architecture reviews and threat modeling, with the ability to identify potential vulnerabilities and recommend appropriate mitigation strategies.
Understanding of vulnerability management processes, including CVE triage, CVSS severity scoring, coordinated vulnerability disclosure, and collaboration with external security researchers.
Ability to balance security requirements with product functionality, performance, maintainability, and practical engineering constraints.
Strong software development fundamentals, with an engineering-first mindset and a commitment to writing reliable, maintainable, and secure code.
Excellent written and verbal communication skills, with the ability to explain complex security concepts and bridge collaboration between dedicated security specialists and product engineering teams.
Strong problem-solving skills, technical curiosity, and the ability to take ownership of security-related initiatives from investigation through implementation.
A proactive and collaborative approach, with the ability to work independently while contributing effectively within a globally distributed engineering organization.
Benefits:
Competitive compensation: Annual base salary ranging from CA$271,150 to CA$434,000 for Canada-based employees.
Equity compensation: Stock or equity participation for all full-time employees.
Remote-first flexibility: Work remotely from home, with access to offices in Seattle and Paris for collaboration and team connection.
Flexible working arrangements: Freedom to organize your schedule while maintaining strong performance and delivery.
Generous paid time off: Vacation allowance, quarterly Whaleness Days, and a dedicated end-of-year wellness break.
Home office support: Resources to create a comfortable and productive remote working environment.
Technology stipend: Monthly allowance equivalent to US$100 net to support work-related technology needs.
Learning and development: Annual professional development budget for conferences, courses, certifications, and continued education.
Parental leave: 16 weeks of paid parental leave after six months of employment.
Comprehensive benefits: Medical coverage, retirement benefits, and paid holidays, with provisions varying by country.
Company merchandise: Access to branded merchandise and team swag.
International collaboration: Opportunity to work with a globally distributed team of experienced engineers and security professionals.
Visa sponsorship: Considered on a case-by-case basis, depending on business needs.