Senior Security Engineer, Offensive Security

🕒 Setembro 9

🌐 Estados Unidos, Canadá – Remoto

🇺🇸 Estados Unidos – Remoto (EUA) 🇨🇦 Canadá – Remoto

💵 $194.150 - $312.950 / ano

⏰ Tempo Integral

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

👻 Score fantasma 11%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Docker, Inc

SiteLinkedInTodas as Vagas

51 - 200 funcionários

💼 Consultoria

☁️ SaaS

💰 $105.000.000 Series C em 2022-03

Consulting • SaaS

Na Docker, simplificamos a vida dos desenvolvedores que estão criando aplicativos que mudam o mundo. A Docker ajuda os desenvolvedores a transformarem suas ideias em realidade, conquistando a complexidade do desenvolvimento de aplicativos. Simplificamos e aceleramos fluxos de trabalho com um pipeline de desenvolvimento integrado e componentes de aplicativos. Ativamente utilizado por milhões de desenvolvedores ao redor do mundo, o Docker Desktop e o Docker Hub oferecem simplicidade, agilidade e escolha incomparáveis.

Descrição

• Drive offensive security at Docker through realistic adversarial testing of products, platforms, and cloud infrastructure • Partner with engineering, product, and leadership to turn findings into durable fixes and shape secure product design • Find and eliminate risks across Docker products and infrastructure using penetration testing, threat modeling, and exploit development • Implement proactive security solutions across AWS, GCP, Azure, containerized environments, and AI/ML products • Contribute to security initiatives aligned with business goals • Support and implement automated security design reviews and vulnerability management • Build software security and architecture expertise and serve as a resource for engineering teams • Design and implement security architecture and controls across Docker products and platforms • Plan, scope, and execute penetration tests and red-team/adversary-emulation engagements • Develop proof-of-concept exploits and risk-rated findings with remediation guidance; retest fixes • Build and maintain offensive security tooling and automation • Perform security reviews and threat modeling of designs, architectures, and code, including emerging AI products • Write automated security tests and exploits • Participate in a rotating on-call schedule, respond to security events, investigate threats, and coordinate remediation • Educate and collaborate with engineering and product teams on security practices • Participate in security incident response • Conduct security reviews and penetration tests during the first 90 days • Contribute to security roadmap, Zero Trust and least-privilege controls, monitoring, anomaly detection, product-release reviews, recurring adversary-emulation exercises, audits, SOC 2 and ISO 27xxx compliance, and security-by-design advocacy

🎯 Requisitos

• 3+ years in security engineering, including hands-on offensive security and penetration testing across applications and infrastructure • 2+ years of hands-on development experience in Python or Golang • Deep expertise in authentication and authorization, including OAuth, cryptography applications, and Zero Trust principles • Strong hands-on experience securing cloud ecosystems such as AWS, GCP, and Azure • Hands-on penetration testing experience across SaaS web applications and APIs, including manual exploitation beyond automated scanners • Proficiency with offensive tooling and techniques such as Burp Suite and OWASP frameworks • Ability to write security tests and develop exploits and proof-of-concepts • Understanding of AI/ML security risks and mitigations, including prompt injection, data poisoning, model extraction, and adversarial attacks • Practical experience using LLMs and agentic tooling to automate vulnerability discovery, reconnaissance, and pentesting workflows • Track record of building security programs and automations from scratch using risk-based prioritization • Experience performing security reviews and building or improving security review automation • Excellent communication skills for explaining complex security concepts to technical and non-technical stakeholders • Understanding of industry standards and emerging security technologies and models • Team player who drives security change through collaboration and cross-functional partnerships • Offensive security certification such as OSCP, OSWE, OSEP, GXPN, GPEN, or CRTO • Published CVEs, original security research, or conference talks • Bonus: experience with container escape, Kubernetes attack paths, or cloud red teaming • Bonus: experience testing AI/ML systems for prompt injection, model extraction, and data poisoning • Must be legally authorized to work in the country where applying • Docker does not offer visa sponsorship for this role

🏖️ Benefícios

• Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration. • Flexibility that fits your life • Generous PTO • Designated quarterly Whaleness Days • Designated end-of-year Whaleness break • Home office support • Technology stipend equivalent to US$100 net per month • Annual learning and development stipend for conferences, courses, certifications, and continued learning • 16 weeks of paid parental leave after six months of employment • Equity for all full-time employees • Medical benefits • Retirement benefits • Paid holidays, varying by country • Docker swag

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo