Docker

Software Engineer, Supply Chain Security

Canada

€75,200 – €103,400Compensation
Junior (1 to 2 years)Experience Level
Full TimeJob Type
UnknownVisa
Software Development, Containerization, Supply Chain SecurityIndustries

Position Overview

  • Location Type: Remote
  • Job Type: FullTime
  • Salary: €75.2K - €103.4K

Docker is making app development easier so developers can focus on what matters. Our remote-first team spans the globe, united by a passion for innovation and great developer experiences. With over 20 million monthly users and 20 billion image pulls, Docker is the #1 tool for building, sharing, and running apps—trusted by startups and Fortune 100s alike. We’re growing fast and just getting started. Come join us for a whale of a ride!

The Supply Chain Security group is remaking software development and operations security through a holistic, developer-first approach to securing software and software artifacts. We are developing an end-to-end solution for securing the container ecosystem, starting in the developer inner loop and continuing through to production, emphasizing ease-of-use and automation every step of the way. This role will initially be focused on secure container images and the system that builds them, working day-to-day with open-source software, Linux distribution packages, BuildKit, GitHub Actions, Docker Scout, and CVEs. Beyond building images, there will be extensive interaction with customers using these images and helping to shape the tooling that makes these images as easy to work with as Docker Official Images. If you are comfortable in a fast-paced, customer-first environment allowing you to dig into low-level details about how software is built, packaged, and run, this role is for you. Come contribute to creating an amazing developer experience around secure containers with the world’s experts in container images and supply chain security!

Requirements

  • Experience building container images with BuildKit
  • Understanding of low-level container image primitives (manifests, indices, digests, attestations, etc.)
  • Familiarity with Linux distributions and compiling software from source
  • Experience with continuous integration systems, particularly GitHub Actions
  • Knowledge of software security tooling like Docker Scout

Responsibilities

  • Creating and supporting secure container images and related metadata like SBOMs and vulnerabilities
  • Maintaining and enhancing SLSA Build Level 3 compliant build system leveraging BuiltKit and GitHub Actions
  • Collectively own the security posture and developer experience of using secure container images
  • Interact with customers using the images and help shape the tooling
  • Create your first few images with the help of your team
  • Continue to create, maintain, and support secure images
  • Improve the image build system
  • Deepen your knowledge of images and building images
  • Help other new team members onboard
  • Regularly interact with customers using the images
  • Contribute to custom CVE feed and remediate vulnerabilities across the image catalog
  • Work with the team to develop custom

What to Expect in the First 30 Days

  • Integrate into a dynamic team building security-first container images for customers
  • Deepen knowledge of container images, container image builds, BuildKit, and vulnerabilities
  • Create your first few images

What to Expect in the First 90 Days

  • Continue to create, maintain, and support secure images
  • Improve the image build system
  • Deepen your knowledge of images and building images
  • Help other new team members onboard
  • Regularly interact with customers using the images
  • Contribute to custom CVE feed and remediate vulnerabilities across the image catalog
  • Work with the team to develop custom

Skills

BuildKit
container images
manifests
indices
digests
attestations
Linux distributions
compiling software
CI systems
open-source software
GitHub Actions
Docker Scout
CVEs

Docker

Containerization platform for application development

About Docker

Docker offers a containerization platform that enables developers to build, share, and run applications in isolated environments called containers. These containers package applications with their dependencies, ensuring consistent performance across different stages of development and deployment. Docker stands out from competitors by simplifying the development process and enhancing collaboration, with a freemium business model that includes various subscription tiers and services like Docker Hub and Docker Desktop. The company's goal is to streamline software development and deployment, making it easier for developers to manage applications efficiently.

Palo Alto, CaliforniaHeadquarters
2013Year Founded
$484.3MTotal Funding
SERIES_CCompany Stage
Consumer Software, Enterprise SoftwareIndustries
501-1,000Employees

Benefits

Flexible Work Hours
Home Office Stipend
Parental Leave
Phone/Internet Stipend
Unlimited Paid Time Off
Professional Development Budget
Company Equity
Health Insurance

Risks

Competition from Kubernetes could impact Docker's market share.
Alternative container runtimes like Podman pose a threat to Docker's dominance.
Security vulnerabilities in Docker containers could undermine platform trust.

Differentiation

Docker offers a comprehensive platform for building, sharing, and running applications.
Docker's containerization ensures consistency across development and deployment stages.
Docker's freemium model provides flexibility with various subscription tiers.

Upsides

Increased adoption of Kubernetes drives demand for Docker's containerization solutions.
Docker's acquisitions enhance its performance, flexibility, and security features.
Growing hybrid and multi-cloud environments position Docker as a key player.

Land your dream remote job 3x faster with AI