Software Engineer, Supply Chain Security
Overview
At Docker, we make app development easier so developers can focus on what matters. Our remote-first team spans the globe, united by a passion for innovation and great developer experiences. With over 20 million monthly users and 20 billion image pulls, Docker is the #1 tool for building, sharing, and running apps—trusted by startups and Fortune 100s alike. We’re growing fast and just getting started. Come join us for a whale of a ride! The Supply Chain Security group is remaking software development and operations security through a holistic, developer-first approach to securing software and software artifacts.
Job Description
We are developing an end-to-end solution for securing the container ecosystem, starting in the developer inner loop and continuing through to production, emphasizing ease-of-use and automation every step of the way. This role will initially be focused on secure container images and the system that builds them, working day-to-day with open-source software, Linux distribution packages, BuildKit, GitHub Actions, Docker Scout, and CVEs. Beyond building images, there will be extensive interaction with customers using these images and helping to shape the tooling that makes these images as easy to work with as Docker Official Images.
Responsibilities
- - Creating and supporting secure container images and related metadata like SBOMs and vulnerabilities
- - Maintaining and enhancing SLSA Build Level 3 compliant build system leveraging BuiltKit and GitHub Actions
- - Collectively own the security posture and developer experience of using secure container images
Required Skills
- - Experience building container images with BuildKit
- - Understanding of low-level container image primitives, i.e., manifests, indices, digests, attestations, etc.
- - Familiarity with Linux distributions and compiling software from source
- - Experience with continuous integration systems, particularly GitHub Actions
- - Knowledge of software security tooling like Docker Scout
Benefits
- - Freedom & flexibility; fit your work around your life
- - Designated quarterly Whaleness Days
- - Home office setup; we want you comfortable while you work
- - 16 weeks of paid Parental leave
- - Technology stipend equivalent to $100 net/month
- - PTO plan that encourages you to take time to do the things you enjoy
- - Quarterly, company-wide hackathons
- - Training stipend for conferences, courses and classes
- - Equity; we are a growing start-up and want all employees to have a share in the success of the company
- - Docker Swag
- - Medical benefits, retirement and holidays vary by country
About the company
Docker provides a suite of development tools, services, trusted content, and automations, used individually or together, to accelerate the delivery of secure applications.
All Job Openings at Docker