Director, Security

At Docker, we make app development easier so developers can focus on what matters. Our remote-first team spans the globe, united by a passion for innovation and great developer experiences. With over 20 million monthly users and 20 billion image pulls, Docker is the #1 tool for building, sharing, and running apps—trusted by startups and Fortune 100s alike. We’re growing fast and just getting started. Come join us for a whale of a ride!The Director of Security will help Docker enable the growth of Docker’s products with a Security first mindset. The Security team enables the secure design and engineering of Docker’s products and secures Docker’s systems and tools with the goal of exceeding security standards, compliance, and audit requirements. We are an enabling team of Security Engineers, not analysts. As a member of this team, you will work closely with all Docker’s engineering teams in determining the overall security strategy for Docker products. You will also manage systems and processes that keep Docker safe. This is a cross-functional role that spans security engineering, corporate security and security operations.Responsibilities:Manage Docker’s cross-functional Security Engineering teamDrive the Security Engineering Roadmap and adoption across all Docker departmentsSet team goals and objectives, conduct regular one-on-one meetings with direct reportsSet the security posture and processes responsible for keeping Docker safeDrive enhancements and improvements to security processesParticipate in code reviews, vulnerability remediation, and larger scale engineering projects to help improve security posture, automation, controls, offensive security/red teamingBe a liaison to internal customers and the wider organization, making sure they have the resources and knowledge to maintain our security standardsPartner with the Governance, Risk and Compliance team to find a best fit in enforcing compliance and audit controls while assuring engineering velocityRequirements:10+ years of experience in security engineering and/or engineering4+ years experience leading engineering teams and familiarity with agile development and securityKnowledge and experience implementing secure coding best practicesExperience with AWSExperience with Terraform or other cloud configuration tools.Understanding of security nuances in cloud-native container-based systemsFundamental knowledge of encryption and best practicesHave participated in SOC2, ISO 270001 or equivalent compliance prep and auditsExperience in Vendor managementPreferred:Familiarity with GCP and AzureExperience with SIEM platforms and cloud EDR tools is a plusWhat to expect in the first 30 daysUnderstand how Product Security fits into the wider organizationLead Security Engineering team in executing critical initiatives and projectsSchedule 1-on-1’s with each direct reportGet to know each team memberMeet and gather feedback from key leaders from the teams we supportBuild a high level understanding of the existing product security plans and guide the team through executionWhat to expect in the first 90 daysDevelop a team roadmap for the next quarterReporting progress regularly to leadershipSet career goals with team members and start working towards themParticipate in Incident responseMeet regularly with engineering managersDrive one adoption of a security primitives and/or best practice across the companyWhat to expect in the first yearFurther Docker’s initiative of security first throughout engineeringLead Docker’s Product Security team initiativesHave demonstrable results on team career development and team happiness / effectivenessWe use Covey as part of our hiring and / or promotional process for jobs in NYC and certain features may qualify it as an AEDT. As part of the evaluation process we provide Covey with job requirements and candidate submitted applications. We began using Covey Scout for Inbound on April 13, 2024.Please see the independent bias audit report covering our use of Covey here.PerksFreedom & flexibility; fit your work around your lifeDesignated quarterly Whaleness DaysHome office setup; we want you comfortable while you work16 weeks of paid Parental leaveTechnology stipend equivalent to $100 net/monthPTO plan that encourages you to take time to do the things you enjoyQuarterly, company-wide hackathonsTraining stipend for conferences, courses and classesEquity; we are a growing start-up and want all employees to have a share in the success of the companyDocker SwagMedical benefits, retirement and holidays vary by countryDocker embraces diversity and equal opportunity. We are committed to building a team that represents a variety of backgrounds, perspectives, and skills. The more inclusive we are, the better our company will be.Due to the remote nature of this role, we are unable to provide visa sponsorship.#LI-REMOTE

Apply Now