Senior App Security Engineer: Identity & Access

Discord Inc.; San Francisco (CA); On-site; USD 196,000 - 220,500; Full time

Job summary

Discord Inc. is seeking a Senior Software Engineer on the Application Security team to protect users’ accounts across the platform. You will build secure authentication and session management features for hundreds of millions of users.

You will lead cross-functional security projects, ship user-facing security tools, and stay current with WebAuthn, MFA, and cloud security best practices, while advancing Discord’s commitment to secure, private experiences.

Qualifications

• 5+ years of experience securing production applications.
• 3+ years of experience programming in at least one general-purpose programming language (e.g., Python, Go, Java, or Rust).
• Hands-on experience shipping production software, including security features, controls, frameworks, or guardrails.
• Hands-on experience with authentication and account security such as WebAuthn, passkeys, FIDO2, MFA, and session management.

Responsibilities

• Design and implement full-stack, user-facing security solutions that protect hundreds of millions of Discord users.
• Lead full-stack work to strengthen session security and authentication for Discord’s users.
• Improve, operate, and maintain security-critical authentication services, owning their correctness and security.
• Partner with Product teams to drive adoption of stronger authentication and to ship user-facing account security tools.
• Identify and design solutions for emerging threats to user account security.
• Research and implement new security capabilities for the Discord platform, staying current on the authentication and session security landscape.
• Build security controls and tools that emphasize self-service, automation, and performance to help identify and mitigate account security flaws.

Skills

Security engineering

Authentication knowledge

Cloud security

Leadership

Tools

WebAuthn

FIDO2

MFA

Job description

Discord Inc. is seeking a Senior Software Engineer on the Application Security team to protect users’ accounts across the platform. You will build secure authentication and session management features for hundreds of millions of users.

You will lead cross-functional security projects, ship user-facing security tools, and stay current with WebAuthn, MFA, and cloud security best practices, while advancing Discord’s commitment to secure, private experiences.