Description
We are seeking a Staff Software Engineer to join our Platform Security Engineering team. As a key member of this team, you will be responsible for advancing our mission through security expertise, software development, and operational excellence.
In this technical leadership role, you will articulate and pursue the most leveraged opportunities to reduce security risk across Engineering, designing and building lovable 'paved paths' for managing identities and access, shipping code, configuring cloud infrastructure, and operating services.
Key responsibilities include:
- Developing and applying best-in-class secure baselines for cloud infrastructure
- Securing first- and third-party software supply chains, from the dev environment through CI/CD and into production
- Building and owning identity and access management (IAM) systems that are user-friendly and promote least privilege
- Managing infrastructure vulnerabilities while supporting rapid growth for Engineering
- Consulting on risk assessments, architectural designs, threat models, code reviews, and more,pragmatically balancing security with other business considerations
Example projects include:
- Supporting IAM with scalable platform solutions
- Building tooling to prevent and address vulnerabilities across our infrastructure
- Integrating service-to-service authentication and authorization into Discord's internal developer platform
What we look for in a candidate includes:
- 5+ years of experience building and operating production systems or infrastructure
- 5+ years of experience writing software in a general-purpose programming language
- 4+ years of experience securing systems with millions of users
- Experience mentoring junior ICs and leading technical projects involving multiple engineers and spanning multiple quarters
- Experience designing and building software for customers (internal or external) beyond your immediate team
- Experience securing cloud environments
- Experience defining and orchestrating containers
- Familiarity with build and CI/CD technologies
- Understanding of modern authentication and authorization concepts
Bonus points if you have experience developing and debugging distributed systems atop GCP and Cloudflare, leading complex migrations or risk management programs across an engineering organization, or managing and securing VMs or bare-metal hosts.