h3About Docker /h3 pDocker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout. /p pWe are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default. /p h3The Role /h3 pYou are a software engineer who cares deeply about security. Embedded in the Desktop engineering team, you will bring an engineering-first perspective to the security of a complex, cross-platform product built at the intersection of identity, OCI runtimes, and Linux kernel internals. You will read and write Go, participate in feature development, and make security a first-class concern from the inside out: not as an outside reviewer, but as a contributing member of the team. /p pThis role is for someone who is primarily a builder, and who applies that builder’s instinct to making Docker Desktop more secure by default. /p h3Responsibilities /h3 ul liContribute to the Docker Desktop codebase in Go, with a focus on security-sensitive areas such as authentication flows, privilege boundaries, and container runtime behavior. /li liParticipate in design and code reviews across the team, bringing a security perspective to features before they ship. /li liConduct threat modeling and security design reviews for new and evolving product features, with particular focus on authentication, authorization, and container runtime security. /li liServe as the team’s primary liaison to the organization’s security group, attending security syncs and translating central policy into practical engineering decisions. /li liAct as the first point of contact for incoming vulnerability reports and CVEs: validate severity, reproduce issues, coordinate disclosure timelines, and drive remediation with the relevant engineers. /li liDevelop and maintain internal security documentation, guidelines, and runbooks for the team. /li liStay current on the Linux security landscape as it pertainsto containers: namespaces, cgroups, seccomp, AppArmor, capabilities, and the evolving OCI ecosystem.



/li /ul h3Qualifications /h3 ul li6+ years of software engineering experience, with meaningful exposure to security-sensitive systems or a strong personal interest in security. /li liStrong proficiency in Go, with a track record of writing and shipping production-grade code. /li liSolid understanding of Linux fundamentals relevant to container security: namespaces, cgroups, capabilities, seccomp profiles, AppArmor/SELinux, rootless containers, and privilege boundaries. /li liFamiliarity with OCI specifications and container runtime internals. /li liWorking knowledge of identity and access management concepts: OAuth 2.0, OIDC, token handling, and auth flows in desktop or cloud-adjacent contexts. /li liComfort participating in security design reviews and threat modeling, even if security has not been your primary title. /li liFamiliarity with vulnerability management processes: CVE triage, CVSS scoring, coordinated disclosure, and working with external reporters. /li liStrong written and verbal communication skills; comfortable bridging the gap between a dedicated security team and a product engineering team. /li /ul h3What To Expect /h3 h3First 30 Days /h3 ul liYou will onboard into the team and get hands-on with the Docker Desktop codebase, architecture, and development workflow. You will meet your counterparts in the central security organization and learn how vulnerability reports are currently handled. The goal is to listen, ask questions, and build a clear picture of the product’s current security posture, not to change anything yet. /li /ul h3First 90 Days /h3 ul liYou will be an active contributor, writing and reviewing Go code and bringing a security lens to features in flight. You will have taken ownership of the vulnerability intake process, handling your first end-to-end triage cycles with minimal guidance. You will have a working relationship with the engineers on the team and a growing sense of where the most meaningful security investments should be made. /li /ul h3One Year Outlook (First Year) /h3 ul liYou will be a trusted contributor to both the product and its security posture.



You will have shipped meaningful improvements directly to the codebase, whether to auth flows, container isolation defaults, or other security-sensitive areas, and driven better security practices across the team’s development lifecycle. Your work will be directly visible in the security and resilience of a product used by millions of developers every day. /li /ul h3Visa sponsorship /h3 pDocker considers visa sponsorship on a case-by-case basis based on business needs. /p h3Compensation Equity /h3 pAll full-time roles include equity. Final compensation is determined on factors including but not limited to experience, skills, qualifications, and location. /p pCanada: CA$271,150 – CA$434,000 base /p pUnited States: $194,150 – $312,950 base /p pEurope: €113,860 – €186,780 base /p h3Posting Information /h3 ul liOpen vacancy: This posting is for an existing open role. /li liAI in hiring: Docker may use AI-assisted tools during our recruiting process. /li liInterview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent. /li /ul h3Perks Benefits /h3 ul liRemote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration. /li liFlexibility that fits your life – We trust you to manage your schedule while delivering great work. /li liTime to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break. /li liHome office support – Set up your workspace for comfort and success. /li liTechnology stipend – Equivalent to US$100 net per month to help support your work. /li liLearning development – Annual stipend for conferences, courses, certifications, and continued learning. /li liParental leave – 16 weeks of paid parental leave after six months of employment. /li liEquity for all full-time employees – Share in Docker's long-term success as we continue to grow. /li liComprehensive benefits – Medical, retirement, and paid holidays vary by country. /li liDocker swag – Because representing the whale never gets old. /li /ul pDocker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community. /p #J-18808-Ljbffr

📌 Senior Software Engineer, Security, Docker Desktop (Italia)
🏢 Docker
📍 Italia