Intern in operational security at Investissement Québec, supporting security alert management and vulnerability tracking in a supervised learning environment.
About the role
- Corporate Security Engineer at Docker responsible for identity infrastructure and security programs. Collaborating cross-functionally to enhance security posture and compliance across systems.
Responsibilities
- Own and continuously improve Docker's Identity and Access Management infrastructure, including SSO, MFA enforcement, lifecycle management, and access governance
- Discover, map inventory and conduct security reviews on third-party integrations and drive security improvements across our SaaS application ecosystem
- Secure and harden our core collaboration as well as documentation platforms, including email, document sharing, and communication tools
- Define and enforce device compliance policies across our corporate device fleet; own the end-to-end compliant device experience
- Mature a Zero Trust security model across corporate infrastructure, enforcing conditional access based on identity
- Establish and maintain an approved application governance program across desktop, browser, developer tooling, and third-party AI services, with appropriate monitoring and risk-based controls
- Contribute to the team's incident response capability, bringing corporate IT and identity expertise to investigations and remediation efforts
- Design and deploy canaries across our endpoint fleet, for increased visibility and early-warning capabilities
- Participate in the Security team on-call rotation by managing detection and response to security events
- Own and continuously improve employee lifecycle security processes, ensuring robust controls at both onboarding and offboarding
- Maintain IT security evidence and documentation supporting compliance with SOC2 and ISO ISO 27xxx
Requirements
- 6+ years in IT systems engineering with emphasis on automation, and hands-on experience in identity access management, and security best practices
- Deep hands-on expertise with Enterprise IdP (SSO, MFA, lifecycle management, groups, API automation)
- Strong experience securing Google Workspace at an admin level
- Experience with MDM solutions and endpoint hardening
- Solid understanding of OAuth, SAML, OIDC, and modern identity and access patterns
- Experience governing SaaS applications at scale: inventory, risk assessment, integration audits
- Scripting or automation skills (Golang, Python, Bash, Terraform, or similar) for API integration work
- Ability to write and own technical design documents and risk assessments
- Strong cross-functional communication — able to work effectively with GRC, IT, legal, and non-technical stakeholders
- Experience with compliance frameworks such as SOC2 or ISO 27xxx.
Benefits
- Freedom & flexibility; fit your work around your life
- Designated quarterly Whaleness Days plus end of year Whaleness break
- Home office setup; we want you comfortable while you work
- 16 weeks of paid Parental leave
- Technology stipend equivalent to $100 net/month
- PTO plan that encourages you to take time to do the things you enjoy
- Training stipend for conferences, courses and classes
- Equity; we are a growing start-up and want all employees to have a share in the success of the company
- Docker Swag
- Medical benefits, retirement and holidays vary by country
- Remote-first culture, with offices in Seattle and Paris
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
IT Information Security Lead at Mirego, responsible for technology and information security management. Overseeing compliance and IT strategies while maintaining operational efficiency.
EC
Cybersecurity Specialist focusing on offensive security for Exposant 3. Performing penetration testing, security audits, and team knowledge transfer in a hybrid work setup.
Financial security advisor in life and health insurance, developing and maintaining client relationships. Selling insurance products and assessing customer needs to provide personalized solutions.
Senior Security Engineer designing and maintaining Microsoft 365 security solutions at ResMed. Focusing on compliance, incident response, and collaboration with global teams.
Senior Infrastructure professional solving practical security challenges and improving enterprise systems security at Confluence. Focused on implementation, remediation, and secure operations across Windows and Linux environments.
Senior infrastructure professional responsible for vulnerability remediation and security improvements across enterprise systems at Confluence. Hands - on role involving Windows and Linux environments with strong collaboration with Cybersecurity team.
Enterprise Security Architect responsible for implementing information security best practices at SecureOps. Collaborating with clients to analyze networks and provide effective security solutions.
Health, safety, and environment advisor responsible for maintaining compliance and promoting safety practices. Supporting project teams and developing SSE programs to manage risks in the workplace.
Security Consultant I focusing on compliance and audit within TELUS Health, conducting risk assessments and collaborating with various departments.