Docker

Director, Security

Canada

$300,000 – $375,000Compensation
Expert & Leadership (9+ years)Experience Level
Full TimeJob Type
UnknownVisa
Software Development, BiotechnologyIndustries

Director of Security

Salary: $300K - $375K Employment Type: Full-Time Location Type: Remote

Position Overview

Docker is seeking a Director of Security to enable the growth of Docker's products with a security-first mindset. The Security team is responsible for the secure design and engineering of Docker's products and securing Docker's systems and tools, with the goal of exceeding security standards, compliance, and audit requirements. This is an enabling team of Security Engineers, not analysts. As a member of this team, you will work closely with all Docker's engineering teams in determining the overall security strategy for Docker products. You will also manage systems and processes that keep Docker safe. This is a cross-functional role that spans security engineering, corporate security, and security operations.

Responsibilities

  • Manage Docker’s cross-functional Security Engineering team.
  • Drive the Security Engineering Roadmap and adoption across all Docker departments.
  • Set team goals and objectives, conduct regular one-on-one meetings with direct reports.
  • Set the security posture and processes responsible for keeping Docker safe.
  • Drive enhancements and improvements to security processes.
  • Participate in code reviews, vulnerability remediation, and larger scale engineering projects to help improve security posture, automation, controls, offensive security/red teaming.
  • Act as a liaison to internal customers and the wider organization, ensuring they have the resources and knowledge to maintain our security standards.
  • Partner with the Governance, Risk and Compliance team to find a best fit in enforcing compliance and audit controls while assuring engineering velocity.

Requirements

  • 10+ years of experience in security engineering and/or engineering.
  • 4+ years of experience leading engineering teams and familiarity with agile development and security.
  • Knowledge and experience implementing secure coding best practices.
  • Experience with AWS.
  • Experience with Terraform or other cloud configuration tools.
  • Understanding of security nuances in cloud-native container-based systems.
  • Fundamental knowledge of encryption and best practices.
  • Experience participating in SOC2, ISO 270001, or equivalent compliance preparation and audits.
  • Experience in Vendor management.

Preferred Qualifications

  • Familiarity with GCP and Azure.
  • Experience with SIEM platforms and cloud EDR tools is a plus.

What to Expect in the First 30 Days

  • Understand how Product Security fits into the wider organization.
  • Lead the Security Engineering team in executing critical initiatives and projects.
  • Schedule 1-on-1s with each direct report.
  • Get to know each team member.
  • Meet and gather feedback from key leaders from the teams we support.
  • Build a high-level understanding of the existing product security plans and guide the team through execution.

What to Expect in the First 90 Days

  • Develop a team roadmap for the next quarter.
  • Report progress regularly to leadership.
  • Set career goals with team members and start working towards them.
  • Participate in Incident Response.
  • Meet regularly with engineering managers.
  • Drive adoption of security primitives and/or best practices across the company.

What to Expect in the First Year

  • Further Docker’s initiative of security first throughout engineering.
  • Lead Docker’s Product Security team initiatives.
  • Achieve demonstrable results in team career development and team happiness/effectiveness.

Company Information

At Docker, we make app development easier so developers can focus on what matters. Our remote-first team spans the globe, united by a passion for innovation and great developer experiences. With over 20 million monthly users and 20 billion image pulls, Docker is the #1 tool for building, sharing, and running apps—trusted by startups and Fortune 100s alike. We’re growing fast and just getting started. Come join us for a whale of a ride!

Note: We use Covey as part of our hiring and/or promotional process for jobs in NYC and certain features may qualify it as an AEDT. As part of the evaluation process, we provide Covey with job requirements and candidate-submitted applications. We began using Covey Scout for Inbound on Apr.

Skills

Security Engineering
Security Strategy
Vulnerability Remediation
Automation
Offensive Security
Red Teaming
Governance
Risk Management
Compliance

Docker

Containerization platform for application development

About Docker

Docker offers a containerization platform that enables developers to build, share, and run applications in isolated environments called containers. These containers package applications with their dependencies, ensuring consistent performance across different stages of development and deployment. Docker stands out from competitors by simplifying the development process and enhancing collaboration, with a freemium business model that includes various subscription tiers and services like Docker Hub and Docker Desktop. The company's goal is to streamline software development and deployment, making it easier for developers to manage applications efficiently.

Palo Alto, CaliforniaHeadquarters
2013Year Founded
$484.3MTotal Funding
SERIES_CCompany Stage
Consumer Software, Enterprise SoftwareIndustries
501-1,000Employees

Benefits

Flexible Work Hours
Home Office Stipend
Parental Leave
Phone/Internet Stipend
Unlimited Paid Time Off
Professional Development Budget
Company Equity
Health Insurance

Risks

Competition from Kubernetes could impact Docker's market share.
Alternative container runtimes like Podman pose a threat to Docker's dominance.
Security vulnerabilities in Docker containers could undermine platform trust.

Differentiation

Docker offers a comprehensive platform for building, sharing, and running applications.
Docker's containerization ensures consistency across development and deployment stages.
Docker's freemium model provides flexibility with various subscription tiers.

Upsides

Increased adoption of Kubernetes drives demand for Docker's containerization solutions.
Docker's acquisitions enhance its performance, flexibility, and security features.
Growing hybrid and multi-cloud environments position Docker as a key player.

Land your dream remote job 3x faster with AI