Senior Software Engineer, Application Security

Discord is seeking a Senior Software Engineer to join its Application Security team. The successful candidate will help protect Discord's users, particularly their accounts. The role involves designing and implementing full-stack, user-facing security solutions for hundreds of millions of users.

Responsibilities

• Join an engineering team designing and implementing full-stack, user-facing security solutions that protect hundreds of millions of Discord users.
• Lead full-stack work to strengthen session security and authentication for Discord's users.
• Improve, operate, and maintain security-critical authentication services, owning their correctness and security.
• Partner with Product teams to drive adoption of stronger authentication and to ship user-facing account security tools.
• Identify and design solutions for emerging threats to user account security.
• Research and implement new security capabilities for the Discord platform, staying current on the authentication and session security landscape.
• Build security controls and tools that emphasize self-service, automation, and performance to help identify and mitigate account security flaws.

Requirements

• 5+ years of experience securing production applications.
• 3+ years of experience programming in at least one general-purpose programming language (e.g., Python, Go, Java, or Rust).
• Hands-on experience building and shipping production software, including security features, controls, frameworks, or guardrails.
• Hands-on experience with authentication and account security, such as WebAuthn, passkeys, FIDO2, MFA, and session management.
• Comfortable reasoning about the security of complex systems, even if they contain components you're not familiar with, and can give engineers clear, sound guidance on secure design and implementation.
• Experience leading security projects with a cross-functional group.
• Experience building or hardening client applications, such as desktop or native mobile apps.
• Experience operating in cloud-based environments (Discord uses Google Cloud).

Nice to Have

• Experience programming in at least one systems programming language (e.g., C, C++).
• Experience developing, operating, and debugging production systems.
• Familiarity with common application vulnerabilities on the platforms Discord ships on.

Compensation

The US base salary range for this full-time position is $196,000 to $220,500 + equity + benefits.