Director – Security

At Docker, we make app development easier so developers can focus on what matters. Our remote-first team spans the globe, united by a passion for innovation and great developer experiences. With over 20 million monthly users and 20 billion image pulls, Docker is the #1 tool for building, sharing, and running apps—trusted by startups and Fortune 100s alike. We’re growing fast and just getting started. Come join us for a whale of a ride!

The Director, Security will help enable the growth of Docker’s products through a security-first mindset. The Security team ensures the secure design and engineering of Docker’s products, while protecting Docker’s internal systems and tools to meet and exceed security standards, compliance, and audit requirements.

We are a team of Security Engineers, not analysts. As a member of this team, you’ll work closely with all Docker engineering teams to shape the overall security strategy for our products. You will also oversee systems and processes that keep Docker secure.

This is a cross-functional role spanning security engineering, corporate security, and security operations.

Responsibilities

• Manage Docker’s cross-functional Security Engineering team

• Drive the Security Engineering roadmap and encourage adoption across all departments

• Set team goals and objectives; conduct regular 1:1 meetings with direct reports

• Establish security posture and processes that ensure Docker's safety

• Drive enhancements and improvements to security practices

• Participate in code reviews, vulnerability remediation, and large-scale engineering projects to improve security posture, automation, controls, and offensive security (e.g., red teaming)

• Act as a liaison to internal teams, ensuring they have the resources and knowledge to uphold security standards

• Partner with the Governance, Risk, and Compliance (GRC) team to strike a balance between enforcing controls and maintaining engineering velocity
  

Qualifications

• 10+ years of experience in security engineering and/or software engineering

• 4+ years of experience leading engineering teams, with familiarity in Agile development and security practices

• Knowledge and experience implementing secure coding best practices

• Experience with AWS

• Experience with Terraform or similar cloud configuration tools

• Understanding of security nuances in cloud-native container-based systems

• Solid knowledge of encryption standards and best practices

• Experience participating in SOC 2, ISO 27001, or equivalent compliance preparation and audits

• Experience with vendor management
  

Preferred Qualifications

• Familiarity with GCP and Azure

• Experience with SIEM platforms and cloud EDR tools

What to Expect

First 30 Days

• Understand how Product Security fits into the wider organization

• Lead Security Engineering team in executing critical initiatives and projects

• Schedule 1-on-1’s with each direct report

• Get to know each team member

• Meet and gather feedback from key leaders from the teams we support

• Build a high level understanding of the existing product security plans and guide the team through execution

First 90 Days

• Develop a team roadmap for the next quarter

• Reporting progress regularly to leadership

• Set career goals with team members and start working towards them

• Participate in Incident response

• Meet regularly with engineering managers

• Drive one adoption of a security primitives and/or best practice across the company

One-Year Outlook

• Further Docker’s initiative of security first throughout engineering

• Lead Docker’s Product Security team initiatives

• Have demonstrable results on team career development and team happiness / effectiveness

We use Covey as part of our hiring and / or promotional process for jobs in NYC and certain features may qualify it as an AEDT. As part of the evaluation process we provide Covey with job requirements and candidate submitted applications. We began using Covey Scout for Inbound on April 13, 2024.

Please see the independent bias audit report covering our use of Covey here.

Perks

• Freedom & flexibility; fit your work around your life

• Designated quarterly Whaleness Days

• Home office setup; we want you comfortable while you work

• 16 weeks of paid Parental leave

• Technology stipend equivalent to $100 net/month

• PTO plan that encourages you to take time to do the things you enjoy

• Quarterly, company-wide hackathons

• Training stipend for conferences, courses and classes

• Equity; we are a growing start-up and want all employees to have a share in the success of the company

• Docker Swag

• Medical benefits, retirement and holidays vary by country

Docker embraces diversity and equal opportunity. We are committed to building a team that represents a variety of backgrounds, perspectives, and skills. The more inclusive we are, the better our company will be.

Due to the remote nature of this role, we are unable to provide visa sponsorship.

#LI-REMOTE