Senior Software Engineer (Application Security)

• We are looking for a Senior Software Engineer to join our Application Security team and protect Discord’s users where it matters most, their accounts. If you are an engineer with a wealth of experience making the secure way the easy way, a deep sense of curiosity, and an endless desire to improve Discord, read on!
• Join an engineering team designing and implementing full-stack, user-facing security solutions that protect hundreds of millions of Discord users
• Lead full-stack work to strengthen session security and authentication for Discord’s users
• Improve, operate, and maintain security-critical authentication services, owning their correctness and security
• Partner with Product teams to drive adoption of stronger authentication and to ship user-facing account security tools
• Identify and design solutions for emerging threats to user account security
• Research and implement new security capabilities for the Discord platform, staying current on the authentication and session security landscape
• Build security controls and tools that emphasize self-service, automation, and performance to help identify and mitigate account security flaws

Benefits

• Discord HQ: At Discord, we believe great work can happen anywhere, whether in person or virtually. Our flexible work model empowers our people to choose where they work best: at home, in one of our offices like our San Francisco HQ, or a mix of both.
• Grow together: Look forward to developing both professionally and personally alongside your colleagues at Discord. All of our managers go through a leadership program, and we offer enriching trainings for everyone. No matter what your interests or skills are, there’s a place on our platform for you to find and build belonging.
• Money matters: Discord strives to offer fair and competitive compensation packages, including equity. You’ll have room to grow and be rewarded based on your contributions and impact at the company. Take advantage of our retirement offerings (including 401k matching in the US) to meet your financial goals.
• Health benefits; At Discord, we health-care about you! We offer medical, dental, vision, reproductive, gender-affirming, and mental healthcare to our employees.
• Family support: Spend some quality time with the next generation with 12+ weeks parental leave, as well as fertility, adoption, and surrogacy benefits.
• R&R: Stay refreshed with four weeks of PTO, 16 paid holidays each year including a week off for the winter holidays, and flexible sick time (which includes mental health days).
• Wellness on us: Take advantage of a $375 quarterly stipend for your gym membership or other activities to keep you feeling great.
• Giving back: Whatever social cause you’re passionate about, take a day (or two) off to make an impact. While you’re at it, take advantage of $1,000/year in donation matching to charitable organizations!- You have 3+ years of experience programming in at least one general-purpose programming language (e.g., Python, Go, Java, or Rust)
• You have experience building or hardening client applications, such as desktop or native mobile apps
• You have hands-on experience building and shipping production software, including security features, controls, frameworks, or guardrails
• You have experience leading security projects with a cross-functional group
• You are comfortable reasoning about the security of complex systems, even if they contain components you aren’t familiar with, and can give engineers clear, sound guidance on secure design and implementation
• You have experience operating in cloud-based environments (we use Google Cloud, but experience with other platforms is okay too)
• You have hands-on experience with authentication and account security, such as WebAuthn, passkeys, FIDO2, MFA, and session management
• Experience programming in at least one systems programming language (e.g. C, C++)
• Experience developing, operating, and debugging production systems
• Familiarity with common application vulnerabilities on the platforms Discord ships on (that’s all of them)