Senior Application Security Engineer - Scale Secure Auth

Discord; California (MO); On-site; USD 196,000 - 245,000; Full time

Job summary

Discord is seeking a senior security engineer to design and ship full-stack, user-facing security features for a platform with hundreds of millions of users. You will own authentication and session security, and guide cross-functional teams in secure design and implementation.

You will work in a cloud-based environment, primarily focused on Google Cloud, and contribute to production-grade defense tooling and self-service security capabilities.

Qualifications

• 5+ years of experience securing production applications.
• You have 3+ years of programming in at least one language (e.g., Python, Go, Java, Rust).
• You have hands-on experience shipping production software with security features and guardrails.

Responsibilities

• Join engineering to design and implement full-stack security solutions for hundreds of millions of users.
• Lead full-stack work to strengthen session security and authentication for users.
• Maintain and improve security-critical authentication services and ensure correctness.
• Collaborate with Product teams to promote stronger authentication and user-facing security tools.
• Identify and design solutions for emerging account security threats.
• Research and implement new security capabilities for the Discord platform.

Skills

Production security

Programming 3+ yrs

Security features

Authentication security

Cloud environments

Cross-functional leadership

Client apps security

WebAuthn / MFA

Tools

Google Cloud

Job description

Discord is seeking a senior security engineer to design and ship full-stack, user-facing security features for a platform with hundreds of millions of users. You will own authentication and session security, and guide cross-functional teams in secure design and implementation.

You will work in a cloud-based environment, primarily focused on Google Cloud, and contribute to production-grade defense tooling and self-service security capabilities.