Engineering Manager, Platform Security

Ali Aydi; San Francisco (CA); Hybrid; USD 248,000 - 310,000; Full time

Benefits offered by this job

Remote-friendly

Equity and benefits

Job summary

Discord is seeking an Engineering Manager to lead a security-focused software engineering team. You will drive security strategy, oversee cloud infrastructure security, and shape identity and access management across services.

You will guide threat modeling, code reviews, and risk assessments while balancing security with business needs. This role is remote with optional SF office access on West Coast.

Qualifications

• 3+ years of experience managing a team of 3+ security software engineers.
• Experience securing systems with millions of users.
• Experience writing software in Python, Typescript, and Rust.
• Experience building in and securing cloud-based environments (GCP, AWS, Cloudflare).

Responsibilities

• Shape company-wide security strategy and lead a highly autonomous team of software engineers.
• Develop and apply secure baselines for cloud infrastructure and ownership of cloud environments.
• Manage infrastructure vulnerabilities while supporting a high-velocity engineering org.
• Secure software supply chains from dev through CI/CD to production.
• Build and operate IAM systems for humans and machines with least privilege.

Skills

People management

Security software engineering

Cloud security

IAM

Python

Typescript

Rust

AI security

Tools

Terraform

Bazel

Buildkite

Spacelift

Kubernetes

Docker

Distroless

OCI

Cloudflare

GCP

AWS

Job description

Discord has a highly engaged community of millions of daily active users who use the platform for many different reasons, but there’s one thing that nearly everyone does: play video games. Discord plays a uniquely important role in the future of gaming, and we are focused on making it easier and more fun for people to hang out before, during, and after playing games.

More broadly, Discord is about empowering people to find belonging in all kinds of communities, and those people trust us to keep their communications safe. Our Platform Security Engineering team protects the systems we use to create Discord, making the “secure way” the “easy way.”

We’re looking for an Engineering Manager to lead a team of software engineers in articulating and pursuing the most leveraged opportunities to reduce security risk across Engineering. This team will design and build lovable “paved paths” for managing identities and access, shipping code, configuring cloud infrastructure, and operating services. If you’re an Engineering Manager who’s deeply curious, eager to own technically and socially complex projects, and excited to improve security and privacy at Discord, read on!

What you'll do

You’ll shape company-wide security strategy and lead a highly-autonomous and horizontally-integrated team of software engineers who will...

• Develop and apply best-in-class secure baselines for cloud infrastructure, owning the security of all cloud environments
• Manage infrastructure vulnerabilities while supporting a high-velocity engineering org with hundreds of developers
• Secure first- and third-party software supply chains, from the dev environment through CI/CD and into production
• Build and operate identity and access management (IAM) systems for humans and machines that are user-friendly and promote least privilege
• Consult on risk assessments, architectural designs, threat models, code reviews, and more—pragmatically balancing security with other business considerations

What we look for

• 3+ years of experience as people manager, having managed a team of 3+ security software engineers
• Passion for creating diverse and inclusive teams and coaching engineers
• 3+ years of experience securing systems with millions of users
• Comfort with writing the roadmap, not just following one
• Experience building in and securing cloud-based environments (we use GCP, Cloudflare, and AWS)
• Expert reasoning about the security of complex systems, even if they contain unfamiliar components
• Experience writing software in a general-purpose programming language (we use Python, Typescript, and Rust)
• Experience developing with agentic AI, and a good grasp of AI security practices

Bonus points if you have…

• Understanding of modern authentication and authorization concepts (e.g. RBAC, OAuth, Zero Trust network architectures, mTLS)
• Familiarity with build and CI/CD technologies (e.g. Terraform, Bazel, Buildkite, Spacelift)
• Experience defining and orchestrating containers (e.g. via Kubernetes, Docker, Distroless, OCI) and serverless workloads (e.g. Cloudflare Workers)
• Experience with running and operationalizing security platforms such as Wiz

This position is West Coast (U.S.) based and can be remote but if you live in the Bay Area, you’re welcome to work from our beautiful SF office.

The base salary range for this full-time position is listed below. This position will also be eligible for equity and benefits. Our salary ranges are determined by role and level. Within the range, individual pay is determined by additional factors, including job-related skills, experience, and relevant education or training. Please note that the compensation details listed in role postings reflect the base salary only, and do not include equity, or benefits.

$248,000—$310,000 USD

Why Discord?

Discord plays a uniquely important role in the future of gaming. We're a multiplatform, multigenerational and multiplayer platform that helps people deepen their friendships around games and shared interests, and helps developers build and grow their businesses. We believe games give us a way to have fun with our favorite people, whether listening to music together or grinding in competitive matches for diamond rank. Join us in our mission! Your future is just a click away!

Discord is committed to inclusion and providing reasonable accommodations during the interview process. We want you to feel set up for success, so if you are in need of reasonable accommodations, please let your recruiter know.

Tags

DevOps and Sysadmin

Details

Who may apply Anywhere — no restriction stated by the employer As the board states it — check the description for country or time-zone limits.

Other requirements Applicant location: probably anywhere (no restriction stated)