Descrição da vaga
Docker
€113860 EUR - €186780 EUR / year
Portugal, Lisboa
Senior Security Engineer, Docker Desktop - €113.860 - €186.780 A Year - Remote em Lisboa, Portugal is listed on Jobeax. Browse 30,000+ vacancies available.
Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout.
We are a globally distributed, remote‑first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default.
As a Senior Security Engineer embedded in the Desktop engineering team, you will own the security posture of a complex, cross‑platform product that sits at the intersection of identity, OCI runtimes, and Linux kernel internals. You will be the team's primary security voice, reviewing features and code before they ship, partnering with our central security organization, and serving as the first line of triage for reported vulnerabilities.
This is a hands‑on engineering role for someone who thinks in threat models and communicates clearly with both product engineers and security specialists alike.
Responsibilities
Partner with engineering and product teams throughout the development lifecycle to identify security risks early, from design review through code review and release.
Conduct threat modeling and security design reviews for new and evolving product features, with particular focus on authentication, authorization, and container runtime security.
Serve as the team's primary liaison to the organization's security group, attending security syncs, relaying guidance, and translating central policy into practical engineering decisions.
Act as the first point of contact for incoming vulnerability reports and CVEs: validate severity, reproduce issues, coordinate disclosure timelines, and drive remediation with the relevant engineers.
Review Go code with a security mindset, identifying classes of issues such as privilege escalation, insecure defaults, injection risks, and improper credential handling.
Contribute security‑focused improvements directly to the codebase where appropriate.
Develop and maintain internal security documentation, guidelines, and runbooks for the team.
Stay current on the Linux security landscape as it pertains to containers: namespaces, cgroups, seccomp, AppArmor, capabilities, and the evolving OCI ecosystem.
Qualifications
6+ years of experience in security engineering, application security, or a closely related discipline, with a track record at senior or staff level.
Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience.
Strong proficiency in Go, with the ability to review and contribute to production‑grade code.
Deep understanding of Linux fundamentals relevant to container security: namespaces, cgroups, capabilities, seccomp profiles, AppArmor/SELinux, rootless containers, and privilege boundaries.
Solid grasp of OCI specifications and container runtime security (e.G. runc, containerd, BuildKit).
Hands‑on experience with identity and access management concepts: OAuth 2.0, OIDC, token handling, and auth flows in desktop or cloud‑adjacent contexts.
Experience performing security design reviews, threat modeling, and participating in secure development workflows.
Familiarity with vulnerability management processes: CVE triage, CVSS scoring, coordinated disclosure, and working with external reporters.
Strong written and verbal communication skills;
comfortable bridging the gap between a dedicated security team and a product engineering team.
What To ExpectFirst 30 DaysYou will onboard into the team and get hands‑on with the Docker Desktop codebase, architecture, and development workflow. You will meet your counterparts in the central security organization and learn how vulnerability reports are currently handled. The goal is to listen, ask questions, and build a clear picture of the product's current security posture, not to change anything yet.
First 90 DaysYou will be an active participant in design and code reviews, bringing a security lens to features in flight. You will have taken ownership of the vulnerability intake process, handling your first end‑to‑end triage cycles with minimal guidance. You will have a working relationship with the engineers on the team and a growing sense of where the most meaningful security investments should be made.
One Year Outlook (First Year)You will be the team's trusted authority on product security. You will have driven meaningful improvements to how the team approaches security across the development lifecycle, whether that's better threat‑modeling practices, improved auth flows, stronger container isolation defaults, or reduced time‑to‑remediation for reported issues. You will be a known presence in the broader security organization, and your work will be directly visible in the security and resilience of a product used by millions of developers every day.
Docker considers sponsorship on a case‑by‑case basis based on business needs.
Perks
Freedom & flexibility;
fit your work around your life
Designated quarterly Whaleness Days plus end of year Whaleness break
Home office setup;
we want you comfortablewhile you work
16 weeks of paid Parental leave
Technology stipend equivalent to $100 net/month
PTO plan that encourages you to take time to do the things you enjoy
Training stipend for conferences, courses and classes
Equity;
we are a growing start‑up and want all employees to have a share in the success of the company
Docker Swag
Medical benefits, retirement and holidays vary by country
Remote‑first culture, with offices in Seattle and Paris
Docker embraces diversity and equal opportunity. We are committed to building a team that represents a variety of backgrounds, perspectives, and skills. The more inclusive we are, the better our company will be.
Compensation Range: €113,860 - €186,780
Vagas semelhantes
18808 - 70787.1
... cloud security, automation, and solving complex security challenges at enterprise scale, we'd love to hear from you. Live What you will do Amgen is seeking a Senior Cloud Security Engineer to join our Cloud Security Organization within the Global Cybersecurity and Digital Trust team. Based at our Lisbon Capability Center, ...
Portugal, Lisboa
Docker is seeking a Senior Security Engineer in Offensive Security to drive proactive security across its products and cloud infrastructure. You will perform penetration testing, threat modeling, and exploit development to surface risks and collaborate with engineering to implement durable fixes. The role spans AWS, GCP, ...
Portugal, Portugal
Findmore Consulting, S.A. in Lisbon is seeking a talented Network Products Engineer to contribute to product evolution and support high-quality network solutions. With over 8 years in the Network Domain, you will drive implementations and transformations for significant projects. The role requires expertise in network automation ...
Portugal, Lisboa
act digital
... CI/CD pipelines and containerized environments - Integrate AI services such as Amazon Bedrock and enterprise LLM platforms - Improve platform reliability, security, observability, and scalability What We're Looking For - 5+ years of experience in Software Engineering, Platform Engineering, or Cloud Engineering - Strong ...
Portugal
€38k EUR - €52k EUR
... with people? Are you passionate about providing premium-level support to customers and are a standout colleague? Cloudflare is seeking an experienced Network Security Engineer to join our team and support our largest and most technically sophisticated customers in resolving technical problems, threats or attacks on their ...
Portugal, Lisboa
PrimeIT
€1750 EUR - €3500 EUR
... 10 benefícios de seres um Primer (Prime Benefits) e percebe porque é que somos muito mais do que uma empresa tecnológica. Estamos à procura de um(a) Network Security Engineer com: - +6 anos de experiência profissional como Network Security Engineer - Experiência com tecnologias de segmentação/microsegmentação de redes - ...
Portugal, Lisboa
Decskill
... padrões reutilizáveis, capacidade hub mais forte e lições compartilhadas de volta para o modo de segurança de grupo. Envia o teu CV para com a referência "AI Security Engineer". O teu próximo desafio pode começar aqui. Na Decskill, estamos comprometidos com a igualdade de oportunidades e a não discriminação. Promovemos uma ...
Portugal, Lisboa
Hybrid – Porto hybrid ⚡ Start: ASAP We’re looking for a Senior Backend Engineer to join a fast-growing company in the EV charging industry , helping design and scale the backend systems powering next-generation charging infrastructure. You will work closely with product and engineering teams to build high-performance and ...
Portugal, Porto
119461
... detection), and hardware/WebGL probing mechanisms to identify virtual webcams while remaining privacy-compliant. - Developer Guidance & PR Reviews: Translate security findings into precise engineering specs for Android, iOS, and Web developers, assisting in code reviews and pull-request security evaluations. - Adversarial ...
Portugal, Portugal
Fyld is hiring: SOC / Security Operations Engineer At Fyld, we believe the future is built with people, technology, and strong values. We are a Portuguese consulting company that operates with transparency, respect, and a focus on everyone's growth. Here, every project is an opportunity to build real, lasting, and scalable ...
Portugal, Porto
AdvanceWorks
Experienced AI Security Engineer to support client cybersecurity infrastructure, focusing on AI/ML systems, LLM risks, and incident investigation. Collaborates with engineering teams to embed security throughout the SDLC.
Portugal
... via iCloud or Google, send a code, an SMS or Telegram password, run some code, or install software — refuse. These are signs of fraud. We are looking for a Senior DevOps / Site Reliability Engineer (SRE) to ensure the reliability, scalability, performance, and security of our platform and cloud infrastructure. You will ...
Portugal, Lisboa
... customers with future solutions using the latest technology and security trends to detect potential threats before they become real. Responsibilities As a Plant Security Engineer, you will support the team working on our products and solutions that are being deployed to coordinate the cybersecurity tasks across a diverse suite ...
Portugal, Leça do Bailio
Adentis Portugal
... security incidents and vulnerabilities. - Configure, manage and optimize network security solutions, including firewalls and security appliances. - Perform security assessments, vulnerability analysis and remediation actions. - Collaborate with internal teams to ensure secure architecture and compliance with security best ...
Portugal, Lisboa
EY Portugal is seeking a Cloud & DevOps Engineer to design, deploy, and manage scalable Azure-based cloud infrastructure for financial services projects. You will work in an Agile environment, partnering with development, operations, and security teams to deliver robust, secure solutions. The role emphasizes automation, ...
Portugal, Lisboa
Quickops procura um Cyber Security Officer para reforçar a equipa com foco em arquitetura de segurança e consultoria sénior. É obrigatório possuir CISSP e experiência prática em ambientes AWS/Azure/GCP, bem como conhecimento de ISO/IEC 27000, NIST CSF e governança IAM. A posição envolve trabalhar com grandes projetos no ...
Portugal, Porto
... integrate IAM capabilities across distributed systems. - Support engineering quality through code reviews, technical guidance and knowledge sharing on backend and security best practices. WHAT WE ARE LOOKING FOR - More than 10 years of professional backend software engineering experience, with strong exposure to IAM and security ...
Portugal, São Mamede de Infesta
... scalability issues, and security vulnerabilities - Lead code reviews and establish quality gates; champion SonarQube and Snyk adoption - Mentor confirmed and junior engineers - Produce technical documentation, ADRs, and runbooks What we're looking for: - 8+ years of software engineering experience - Expert-level Java and Spring/Spring ...
Portugal, Lisboa
... scalability issues, and security vulnerabilities - Lead code reviews and establish quality gates; champion SonarQube and Snyk adoption - Mentor confirmed and junior engineers - Produce technical documentation, ADRs, and runbooks What we're looking for: - 8+ years of software engineering experience - Expert-level Java and Spring/Spring ...
Portugal, Lisboa