Senior Software Engineer, Application Security

About the role

Discord is looking for a senior engineer to join our Application Security team to defend user accounts. You will build and maintain systems that keep millions of users safe while ensuring security remains a core part of the user experience.

Key facts

What you'll do

• Design and deploy full-stack security solutions for our user base.
• Lead initiatives to enhance authentication and session security.
• Manage and improve security-critical authentication services.
• Collaborate with Product teams to implement account security tools and increase adoption of strong authentication.
• Create strategies to address emerging threats against user accounts.
• Research and integrate new security features to stay ahead of the authentication landscape.
• Develop automated, self-service security tools to detect and resolve account vulnerabilities.

Requirements

• 5+ years of experience in production application security.
• 3+ years of programming experience in Python, Go, Java, or Rust.
• Proven track record of shipping production software, including security frameworks or controls.
• Technical background in account security and authentication, specifically WebAuthn, passkeys, FIDO2, MFA, and session management.
• Ability to analyze complex systems and provide secure design guidance to other engineers.
• Experience leading cross-functional security projects.
• Background in hardening desktop or native mobile applications.
• Experience working within cloud environments, such as Google Cloud.

Nice to have

• Proficiency in systems programming languages like C or C++.
• Experience debugging and operating production systems.
• Knowledge of common application vulnerabilities across various platforms.

Skills & tools

• Python, Go, Java, Rust, C, C++
• WebAuthn, FIDO2, MFA
• Google Cloud
• Authentication and session management

Practical notes

• Compensation includes base salary, equity, and benefits.
• Discord provides reasonable accommodations during the interview process upon request.
• This role is restricted to candidates based in the United States.