Senior Security Engineer, Privacy (Eastern Time Zone Preferred)

Docker1 months ago

Location

Canada

Workplace

Remote

Type

Full Time

Salary

USD 150,000 – 220,000

Level

Senior

Role

Security Engineer

Posted

Jan 21, 2026

Full TimeRemoteSenior

The role

Summary

Docker is seeking a Senior Security Engineer specializing in Privacy to drive comprehensive security and compliance initiatives. The ideal candidate will blend deep governance, risk, and compliance (GRC) expertise with hands-on privacy engineering skills to develop scalable solutions that protect the platform and its users across global regulatory landscapes.

What you'll do

Privacy Engineering: Embed privacy-by-design principles into Docker's products and platforms

Compliance Automation: Design and maintain automated workflows for risk management and compliance monitoring

Security Assessment: Conduct comprehensive security risk and data protection impact assessments

Policy Development: Draft and maintain security and privacy policies aligned with regulatory frameworks

Cross-Functional Collaboration: Partner with engineering, product, legal, and leadership teams to integrate privacy requirements

What we look for

Technical

Programming SkillsProficiency in Python or Golang for compliance automation

Cloud SecurityHands-on experience with AWS, Azure, or GCP security controls

Compliance AutomationAbility to develop and implement automated GRC workflows

Education

CybersecurityBachelor's degree in Computer Science, Information Security, or related field preferred

Compliance StudiesAdvanced certifications in privacy and security frameworks

Experience

Privacy Engineering6-8 years of experience in information security, privacy engineering, or GRC roles

Regulatory ComplianceProven track record of implementing privacy programs aligned with GDPR and ISO standards

Skills

Required skills

Privacy EngineeringExpertise in implementing privacy-by-design principles and data protection controls

Compliance FrameworksComprehensive knowledge of ISO 27001, ISO 27701, GDPR, SOC 2, and other regulatory standards

Cloud SecurityExperience with public cloud security in AWS, Azure, or GCP environments

ProgrammingProficiency in Python or Golang for automation and scripting

DevSecOpsExperience integrating security requirements into SDLC and CI/CD pipelines

Nice to have

CertificationsCISSP, CISA, CIPP/E, ISO/IEC 27701 Lead Implementer

Risk ManagementAdvanced experience in conducting security risk and data protection impact assessments

Compliance AutomationExpertise in developing automated GRC workflows and tooling

Compensation & benefits

Salary

USD 150,000 – 220,000 (annual)

Stock options

Available

Benefits

Remote Work

Fully remote-first culture with flexible work arrangements

Home Office Support

Technology stipend and home office setup budget

Professional Development

Training stipend for conferences, courses, and continuous learning

Parental Leave

16 weeks of paid parental leave

Equity

Stock options to share in company's growth

Time Off

Generous PTO and quarterly 'Whaleness Days'

Interview process

1
Initial Screening — Phone or video call with recruiting team to assess basic qualifications
2
Technical Assessment — Comprehensive evaluation of privacy engineering and compliance skills
3
Technical Interviews — Multiple rounds with security engineering and leadership team
4
Final Interview — Meet with senior leadership to discuss strategic approach to privacy and compliance