Docker

1 month ago

Staff Supply Chain Security Engineer, Docker Hardened Images

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 7 hours agoStatus: Live

Job Summary

Lead the technical direction for Docker Hardened Images, focusing on packaging, security hardening, and upstream integration across images and Helm charts. Own catalogue-wide architecture decisions, collaborate with product and security teams, and drive CVE triage, SBOM/SLSA posture, and upstream OSS engagement. This is an IC role emphasizing influence through design and mentorship in a remote-first environment.

Location: Canada, United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Setting catalogue-wide technical direction - defining the conventions, patterns, and architectural decisions that govern how images and Helm charts are authored across DHI, and evolving them as the catalogue grows
•Owning the hardest packaging problems - images and charts with complex upstream dynamics where the right answer isn’t obvious
•Authoring and maintaining image definition files that track upstream OSS releases, define build steps, and keep the catalogue current
•Adapting upstream Helm charts to work with DHI images - handling security constraints and Kubernetes compatibility concerns
•Driving security hardening strategy - leading CVE triage approaches, hardening decisions, and supply chain posture across the catalogue

Pay and Benefits

Salary: USD 166,500 - 269,500 annually

Equity and Bonus:Equity

Perks:EquityRemote WorkParental LeaveTraining StipendHealth Insurance

Key Requirements

•8+ years of backend engineering experience with production-grade systems
•Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience
•Deep expertise in the container and Kubernetes ecosystem (cert-manager, kyverno, grafana, istio) and upstream Helm chart navigation
•Mastery of YAML as a working medium and experience designing conventions that others follow
•Strong container security background (non-root contexts, UID/GID, multi-arch, provenance, attestation, SBOM, signing)

Experience:8+ yearsContainerKubernetesSecuritySupply chainOSS

Education:Bachelor's

Skills:YamlGoKubernetesDockerContainer securitySBOMSigningHelmCert-managerKyvernoGrafanaIstio

Languages:English

Tech Stack:YAMLGoDockerKubernetesHelmCert-managerKyvernoGrafanaIstioSBOMSigstore

Company Brief

Docker

Docker builds developer tools and a collaborative platform for building, sharing and running containerized applications, including Docker Desktop and Docker Hub, to simplify container workflows from code to cloud.

Industry: Developer Tools

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Funding: Series C

Headquarters: San Francisco, United States

Founded: 2013

Glassdoor: 2.7

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

Docker

1 month ago

Staff Supply Chain Security Engineer, Docker Hardened Images

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 7 hours agoStatus: Live

Job Summary

Location: Canada, United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Setting catalogue-wide technical direction - defining the conventions, patterns, and architectural decisions that govern how images and Helm charts are authored across DHI, and evolving them as the catalogue grows
•Owning the hardest packaging problems - images and charts with complex upstream dynamics where the right answer isn’t obvious
•Authoring and maintaining image definition files that track upstream OSS releases, define build steps, and keep the catalogue current
•Adapting upstream Helm charts to work with DHI images - handling security constraints and Kubernetes compatibility concerns
•Driving security hardening strategy - leading CVE triage approaches, hardening decisions, and supply chain posture across the catalogue

Pay and Benefits

Salary: USD 166,500 - 269,500 annually

Equity and Bonus:Equity

Perks:EquityRemote WorkParental LeaveTraining StipendHealth Insurance

Key Requirements

•8+ years of backend engineering experience with production-grade systems
•Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience
•Deep expertise in the container and Kubernetes ecosystem (cert-manager, kyverno, grafana, istio) and upstream Helm chart navigation
•Mastery of YAML as a working medium and experience designing conventions that others follow
•Strong container security background (non-root contexts, UID/GID, multi-arch, provenance, attestation, SBOM, signing)

Experience:8+ yearsContainerKubernetesSecuritySupply chainOSS

Education:Bachelor's

Skills:YamlGoKubernetesDockerContainer securitySBOMSigningHelmCert-managerKyvernoGrafanaIstio

Languages:English

Tech Stack:YAMLGoDockerKubernetesHelmCert-managerKyvernoGrafanaIstioSBOMSigstore

Company Brief

Docker

Industry: Developer Tools

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Funding: Series C

Headquarters: San Francisco, United States

Founded: 2013

Glassdoor: 2.7

Website LinkedIn Glassdoor