Senior Software Engineer, Application Security

Stack

Responsibilities

• ▹Lead full-stack work to strengthen session security and authentication
• ▹Improve, operate and maintain security-critical authentication services
• ▹Partner with product teams to drive adoption of stronger authentication and ship account security tools
• ▹Identify and design solutions for emerging threats to account security
• ▹Research and implement new security capabilities for the platform
• ▹Build security controls and tools emphasizing self-service, automation and performance

Requirements

• ▹5+ years of experience securing production applications
• ▹3+ years of programming in at least one general-purpose language (e.g. Python, Go, Java, Rust)
• ▹Hands-on experience building and shipping production software, including security features, controls, frameworks or guardrails
• ▹Hands-on experience with authentication and account security (WebAuthn, passkeys, FIDO2, MFA, session management)
• ▹Able to reason about the security of complex systems and give engineers clear guidance
• ▹Experience leading security projects with a cross-functional group
• ▹Experience building or hardening client applications (desktop or native mobile)
• ▹Experience in cloud environments (Google Cloud, other platforms are okay)
• ▹Reside in or be willing to relocate to the San Francisco Bay Area

Nice to have

• ▹Experience with a systems programming language (e.g. C, C++)
• ▹Experience developing, operating and debugging production systems
• ▹Familiarity with common application vulnerabilities on Discord's platforms

Soft skills

What we offer

• ▹Relocation assistance may be available

About the company

Discord is a platform with millions of daily active users, focused on gaming communities, where security and privacy are essential to success.