Senior Software Engineer, Application Security
Senior Software Engineer on Discord's Application Security team building full-stack user-facing authentication and account security features to protect hundreds of millions of users. Requires 5+ years securing production applications, hands-on auth experience (WebAuthn, MFA, passkeys), and leading cross-functional security projects.
About the job
What you'll do
- Join an engineering team designing and implementing full-stack, user-facing security solutions that protect hundreds of millions of Discord users.
- Lead full-stack work to strengthen session security and authentication for Discord’s users.
- Improve, operate, and maintain security-critical authentication services, owning their correctness and security.
- Partner with Product teams to drive adoption of stronger authentication and to ship user-facing account security tools.
- Identify and design solutions for emerging threats to user account security.
- Research and implement new security capabilities for the Discord platform, staying current on the authentication and session security landscape.
- Build security controls and tools that emphasize self-service, automation, and performance to help identify and mitigate account security flaws.
Who you are
- 5+ years of experience securing production applications.
- 3+ years of experience programming in at least one general-purpose programming language (e.g., Python, Go, Java, or Rust).
- Hands-on experience building and shipping production software, including security features, controls, frameworks, or guardrails.
- Hands-on experience with authentication and account security, such as WebAuthn, passkeys, FIDO2, MFA, and session management.
- Comfortable reasoning about the security of complex systems, even if they contain components you aren’t familiar with, and can give engineers clear, sound guidance on secure design and implementation.
- Experience leading security projects with a cross-functional group.
- Experience building or hardening client applications, such as desktop or native mobile apps.
- Experience operating in cloud-based environments (we use Google Cloud, but experience with other platforms is okay too).
Bonus points
- Experience programming in at least one systems programming language (e.g. C, C++).
- Experience developing, operating, and debugging production systems.
- Familiarity with common application vulnerabilities on the platforms Discord ships on (that's all of them).
Skills
Application Security, Authentication, Session Management, Webauthn, Passkeys, Fido2, MFA, Python, Go, Java, Rust, GCP, C, C++
Similar jobs
Security Engineering jobs
Discord
United States
Senior platform security engineer responsible for building identity and access management systems, Zero Trust architecture, cloud security baselines, and secure developer platforms. Requires 5+ years operating production systems and strong software development and security experience.
Snowflake
Menlo Park, CABuild secure, large-scale platforms, controls, monitoring, and AI-augmented pipelines that improve Snowflake’s cloud security posture across hundreds of millions of assets and multiple cloud providers. Requires 5+ years of software engineering experience and expertise in secure distributed systems.
Atomicmachines
Emeryville, CALeads enterprise network architecture, cloud connectivity, security, operations, and incident response across corporate and manufacturing environments. Requires 10+ years of network engineering experience, people leadership, AWS networking expertise, and strong network security knowledge.
Anyscale
IndiaOwn detection engineering and lead incident response across corporate and production environments, building cloud, endpoint, runtime, and Kubernetes coverage. The role requires 6+ years in security, hands-on detection development, and end-to-end incident leadership.
Anyscale
San Francisco, CA
Own and advance the security of Anyscale’s production and multi-cloud infrastructure, including hardening, segmentation, Kubernetes runtime protection, and access controls. Requires 8+ years of security engineering experience and hands-on expertise with AWS, Azure, Kubernetes, and cloud security tooling.