Requirements

• 6+ years of experience in security engineering, application security, or a related discipline at senior or staff level
• Bachelor’s degree in Computer Science, Engineering, or related field, or equivalent practical experience
• Strong proficiency in Go with ability to review and contribute to production-grade code
• Deep understanding of Linux fundamentals relevant to container security (namespaces, cgroups, capabilities, seccomp profiles, AppArmor/SELinux, rootless containers, privilege boundaries)
• Solid grasp of OCI specifications and container runtime security (e.g. runc, containerd, BuildKit)
• Hands-on experience with identity and access management concepts: OAuth 2.0, OIDC, token handling, and auth flows in desktop or cloud-adjacent contexts
• Experience performing security design reviews, threat modeling, and participating in secure development workflows
• Familiarity with vulnerability management processes: CVE triage, CVSS scoring, coordinated disclosure, and collaboration with external reporters
• Strong written and verbal communication skills bridging security and product engineering teams

What You'll Be Doing

• Partner with engineering and product teams throughout development lifecycle to identify security risks early
• Conduct threat modeling and security design reviews focusing on authentication, authorization, and container runtime security
• Serve as primary liaison to central security organization, translating policy into engineering decisions
• Act as first point of contact for vulnerability reports and CVEs: validate, reproduce, coordinate disclosure, and drive remediation
• Review Go code with a security mindset to identify risks such as privilege escalation, insecure defaults, injection, and improper credential handling
• Contribute security improvements directly to the codebase where appropriate
• Develop and maintain internal security documentation, guidelines, and runbooks
• Stay current on Linux security landscape as it relates to containers (namespaces, cgroups, seccomp, AppArmor, capabilities, OCI ecosystem)
• Participate in on-call rotation to provide support outside standard hours as needed

Perks and Benefits

• Remote-first by design with offices in Seattle and Paris for collaboration
• Flexible schedule that fits your life and work style
• Generous PTO, quarterly Whaleness Days, and end-of-year Whaleness break for recharge
• Home office support to set up a comfortable workspace
• Technology stipend of US$100 net per month to support your work
• Annual learning and development stipend for conferences, courses, certifications, and continued education
• 16 weeks of paid parental leave after six months of employment
• Equity for all full-time employees to share in company growth
• Comprehensive benefits including medical, retirement, and paid holidays varying by country
• Docker swag to show your pride in representing the brand