Senior App Security Engineer - Auth & Sessions

Discord; San Francisco (CA); On-site; USD 196,000 - 220,500; Full time

Job summary

Discord is seeking a Senior Software Engineer for the Application Security team to protect hundreds of millions of users by strengthening authentication and session security across the platform. You will design and ship security features, collaborate with product teams, and guide engineers on secure design and implementation.

You bring 5+ years securing production apps, hands-on experience with WebAuthn, MFA, and cloud deployments, and a track record leading cross-functional security projects.

Qualifications

• 5+ years of experience securing production applications.
• 3+ years of experience programming in at least one general-purpose language (e.g., Python, Go, Java, Rust).
• Hands-on experience building and shipping production software, including security features, controls, frameworks, or guardrails.
• Hands-on experience with authentication and account security (WebAuthn, passkeys, FIDO2, MFA, session management).
• Ability to reason about security of complex systems and provide engineers with secure design guidance.
• Experience leading security projects with cross-functional teams.
• Experience building or hardening client applications (desktop/mobile).
• Experience operating in cloud-based environments (Google Cloud preferred).

Responsibilities

• Join an engineering team designing and implementing full-stack, user-facing security solutions that protect hundreds of millions of Discord users.
• Lead full-stack work to strengthen session security and authentication for Discord’s users.
• Improve, operate, and maintain security-critical authentication services, owning their correctness and security.
• Partner with Product teams to drive adoption of stronger authentication and to ship user-facing account security tools.
• Identify and design solutions for emerging threats to user account security.
• Research and implement new security capabilities for the Discord platform, staying current on the authentication and session security landscape.
• Build security controls and tools that emphasize self-service, automation, and performance to help identify and mitigate account security flaws.

Skills

Security engineering

Programming languages

Production software

Account security

Security architecture

Security leadership

Client apps

Cloud platforms

Job description

Discord is seeking a Senior Software Engineer for the Application Security team to protect hundreds of millions of users by strengthening authentication and session security across the platform. You will design and ship security features, collaborate with product teams, and guide engineers on secure design and implementation.

You bring 5+ years securing production apps, hands-on experience with WebAuthn, MFA, and cloud deployments, and a track record leading cross-functional security projects.