Senior Security Engineer - Auth & Session Security (Remote)

Mosaec; San Francisco (CA); Remote; USD 196,000 - 245,000; Full time

Job summary

Discord is seeking a Senior Software Engineer for the Application Security team to protect user accounts. You will design and implement full‑stack security solutions, strengthen session security, and own authentication services for hundreds of millions of users.

With 5+ years in security and hands‑on auth expertise, you will guide engineers on secure design, work across product teams, and contribute to evolving platform defenses in a cloud environment (primarily Google Cloud).

Qualifications

• 5+ years of experience securing production applications.
• 3+ years of experience programming in at least one general‑purpose language (e.g., Python, Go, Java, or Rust).
• Hands‑on experience building and shipping production software, including security features, controls, frameworks, or guardrails.
• Hands‑on experience with authentication and account security such as WebAuthn, passkeys, FIDO2, MFA, and session management.
• Comfortable reasoning about the security of complex systems and guiding engineers on secure design.

Responsibilities

• Join an engineering team designing and implementing full‑stack, user‑facing security solutions for hundreds of millions of users.
• Lead full‑stack work to strengthen session security and authentication.
• Improve, operate, and maintain security‑critical authentication services.

Skills

Security of production apps

Programming languages (Python/Go/Java)

Authentication technologies (WebAuthn,

Tools

Google Cloud

Job description

Discord is seeking a Senior Software Engineer for the Application Security team to protect user accounts. You will design and implement full‑stack security solutions, strengthen session security, and own authentication services for hundreds of millions of users.

With 5+ years in security and hands‑on auth expertise, you will guide engineers on secure design, work across product teams, and contribute to evolving platform defenses in a cloud environment (primarily Google Cloud).