# Senior Embedded Product Security Engineer, Docker Desktop at Docker

Docker is hiring a Senior Embedded Product Security Engineer, Docker Desktop for a remote role open to applicants in Canada. Level rates it Little AI ●○○○; you can [apply on Docker](https://jobsbylevel.com/go/2796d2ab-960b-4e29-9a64-7a6f1a244907?utm_medium=ai-agent).

AI Level 1, AI centrality 33 out of 100. Remote (Canada).

## Details

- Company: [Docker](https://jobsbylevel.com/companies/docker)
- AI level: AI Level 1 (score 33 out of 100)
- Location: Remote (Canada)
- Posted: April 28, 2026
- Apply: https://jobsbylevel.com/go/2796d2ab-960b-4e29-9a64-7a6f1a244907?utm_medium=ai-agent
- Free CV review for this job: https://jobsbylevel.com/cv-review?job=senior-embedded-product-security-engineer-docker-desktop-at-docker-b3bf26

## Description

About Docker Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout. We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default. _______________________________________________________________________ The Role You are a product security engineer with a strong engineering foundation. Embedded in the Desktop engineering team, you will bring an engineering-first perspective to the security of a complex, cross-platform product built at the intersection of identity, OCI runtimes, and Linux kernel internals. You will read and write Go, contribute security fixes and hardening to the codebase, and make security a first-class concern from the inside out: not as an outside reviewer, but as a contributing member of the team. This role is for a security engineer who builds: someone who applies an engineer’s instinct to making Docker Desktop more secure by default. _______________________________________________________________________ Responsibilities 6+ years of experience in product security, application security, or software engineering with a security focus, including time embedded with or partnered closely with product engineering teams. Proficiency in Go (or a comparable systems language), with the ability to review security-sensitive code and ship production-quality fixes and tooling. Solid understanding of Linux fundamentals relevant to container security: namespaces, cgroups, capabilities, seccomp profiles, AppArmor/SELinux, rootless containers, and privilege boundaries. Solid grasp of container runtime security (e.g. runc, containerd, BuildKit) and OCI specifications. Working knowledge of identity and access management concepts: OAuth 2.0, OIDC, token handling, and auth flows in desktop or cloud-adjacent contexts. Hands-on experience performing security design reviews and threat modeling for product features. Familiarity with vulnerability management processes: CVE triage, CVSS scoring, coordinated disclosure, and working with external reporters. Strong written and verbal communication skills; comfortable bridging the gap between a dedicated security team and a product engineering team. _______________________________________________________________________ Qualifications 6+ years of software engineering experience, with meaningful exposure to security-sensitive systems or a strong personal interest in security. Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience Strong proficiency in Go, with a track record of writing and shipping production-grade code. Solid understanding of Linux fundamentals relevant to container security: namespaces, cgroups, capabilities, seccomp profiles, AppArmor/SELinux, rootless containers, and privilege boundaries. Familiarity with OCI specifications and container runtime internals. Working knowledge of identity and access management concepts: OAuth 2.0, OIDC, token handling, and auth flows in desktop or cloud-adjacent contexts. Comfort participating in security design reviews and threat modeling, even if security has not been your primary title. Familiarity with vulnerability management processes: CVE triage, CVSS scoring, coordinated disclosure, and working with external reporters. Strong written and verbal communication skills; comfortable bridging the gap between a dedicated security team and a product engineering team.

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/senior-embedded-product-security-engineer-docker-desktop-at-docker-b3bf26

Source: https://jobsbylevel.com/jobs/senior-embedded-product-security-engineer-docker-desktop-at-docker-b3bf26

## Cite this page

Level. https://jobsbylevel.com/jobs/senior-embedded-product-security-engineer-docker-desktop-at-docker-b3bf26.

Get job alerts: https://jobsbylevel.com/newsletter