Engineering Manager, Platform Security

Discord; United States; Remote; USD 180,000 - 240,000; Full time

Job summary

Discord is seeking an Engineering Manager to lead a team of software engineers focused on reducing security risk across Engineering. You will shape security strategy and own technically complex, high-impact projects in identity, access, and cloud security.

You will mentor engineers, drive secure development practices, and collaborate with product teams to balance security with speed. This role emphasizes inclusive leadership and scalable security solutions for millions of users.

Qualifications

• 3+ years managing a team of security engineers.
• Experience securing services with millions of users.
• Ability to craft roadmaps and balance security with business needs.

Responsibilities

• Shape company-wide security strategy and lead a cross-functional team.
• Develop secure baselines for cloud infrastructure and manage vulnerabilities.
• Secure software supply chains from development to production.
• Build and operate IAM systems that are usable and enforce least privilege.
• Provide risk assessments, threat modeling, and architecture reviews.

Skills

People management

Security software engineering

Cloud security

IAM

Threat modeling

Code reviews

Python/Typescript/Rust

AI security practices

Tools

GCP

AWS

Cloudflare

Job description

Discord has a highly engaged community of millions of daily active users who use the platform for many different reasons, but there's one thing that nearly everyone does: play video games. Discord plays a uniquely important role in the future of gaming, and we are focused on making it easier and more fun for people to hang out before, during, and after playing games. More broadly, Discord is about empowering people to find belonging in all kinds of communities, and those people trust us to keep their communications safe. Our Platform Security Engineering team protects the systems we use to create Discord, making the \u0022secure way\u0022 the \u0022easy way\u0022.

We're looking for an Engineering Manager to lead a team of software engineers in articulating and pursuing the most leveraged opportunities to reduce security risk across Engineering. This team will design and build lovable \u0022paved paths\u0022 for managing identities and access, shipping code, configuring cloud infrastructure, and operating services. If you're an Engineering Manager who's deeply curious, eager to own technically and socially complex projects, and excited to improve security and privacy at Discord, read on!

What you'll do

You'll shape company-wide security strategy and lead a highly-autonomous and horizontally-integrated team of software engineers who will

• Develop and apply best-in-class secure baselines for cloud infrastructure, owning the security of all cloud environments
• Manage infrastructure vulnerabilities while supporting a high-velocity engineering org with hundreds of developers
• Secure first- and third-party software supply chains, from the dev environment through CI/CD and into production
• Build and operate identity and access management (IAM) systems for humans and machines that are user-friendly and promote least privilege
• Consult on risk assessments, architectural designs, threat models, code reviews, and more- pragmatically balancing security with other business considerations

What we look for

• 3+ years of experience as people manager, having managed a team of 3+ security software engineers
• Passion for creating diverse and inclusive teams and coaching engineers
• 3+ years of experience securing systems with millions of users
• Comfort with writing the roadmap, not just following one
• Experience building in and securing cloud-based environments (we use GCP, Cloudflare, and AWS)
• Expert reasoning about the security of complex systems, even if they contain unfamiliar components
• Experience writing software in a general-purpose programming language (we use Python, Typescript, and Rust)
• Experience developing with agentic AI, and a good grasp of AI security practices

Bonus points if you have

• Understanding of modern authentication and authorization concepts (e.g. RBAC, OAuth, Zero Trust network architectures, mTLS)
• Familiarity with build and CI/CD technologies (e.g. Terraform, Bazel, Buildkite, Spacelift)
• Experience defining and orchestrating containers (e.g. via Kubernetes, Docker, Distro)