Docker
Director, Security
Docker
$300k - $375k
Remote, Canada, Mexico, United States

Director, Security

Overview

At Docker, we make app development easier so developers can focus on what matters. Our remote-first team spans the globe, united by a passion for innovation and great developer experiences. With over 20 million monthly users and 20 billion image pulls, Docker is the #1 tool for building, sharing, and running apps—trusted by startups and Fortune 100s alike. We’re growing fast and just getting started. Come join us for a whale of a ride!

Job Description

The Director of Security will help Docker enable the growth of Docker’s products with a Security first mindset. The Security team enables the secure design and engineering of Docker’s products and secures Docker’s systems and tools with the goal of exceeding security standards, compliance, and audit requirements. We are an enabling team of Security Engineers, not analysts. As a member of this team, you will work closely with all Docker’s engineering teams in determining the overall security strategy for Docker products. You will also manage systems and processes that keep Docker safe. This is a cross-functional role that spans security engineering, corporate security and security operations.

Responsibilities

  • - Manage Docker’s cross-functional Security Engineering team
  • - Drive the Security Engineering Roadmap and adoption across all Docker departments
  • - Set team goals and objectives, conduct regular one-on-one meetings with direct reports
  • - Set the security posture and processes responsible for keeping Docker safe
  • - Drive enhancements and improvements to security processes
  • - Participate in code reviews, vulnerability remediation, and larger scale engineering projects to help improve security posture, automation, controls, offensive security/red teaming
  • - Be a liaison to internal customers and the wider organization, making sure they have the resources and knowledge to maintain our security standards
  • - Partner with the Governance, Risk and Compliance team to find a best fit in enforcing compliance and audit controls while assuring engineering velocity

Required Skills

  • - 10+ years of experience in security engineering and/or engineering
  • - 4+ years experience leading engineering teams and familiarity with agile development and security
  • - Knowledge and experience implementing secure coding best practices
  • - Experience with AWS
  • - Experience with Terraform or other cloud configuration tools
  • - Understanding of security nuances in cloud-native container-based systems
  • - Fundamental knowledge of encryption and best practices
  • - Have participated in SOC2, ISO 270001 or equivalent compliance prep and audits
  • - Experience in Vendor management
  • - Familiarity with GCP and Azure is preferred
  • - Experience with SIEM platforms and cloud EDR tools is a plus

Benefits

  • - Freedom & flexibility; fit your work around your life
  • - Designated quarterly Whaleness Days
  • - Home office setup; we want you comfortable while you work
  • - 16 weeks of paid Parental leave
  • - Technology stipend equivalent to $100 net/month
  • - PTO plan that encourages you to take time to do the things you enjoy
  • - Quarterly, company-wide hackathons
  • - Training stipend for conferences, courses and classes
  • - Equity; we are a growing start-up and want all employees to have a share in the success of the company
  • - Docker Swag
  • - Medical benefits, retirement and holidays vary by country

About the company

Docker provides a suite of development tools, services, trusted content, and automations, used individually or together, to accelerate the delivery of secure applications.


All Job Openings at Docker