Senior Software Engineer, Application Security

Discord is a voice, video, and text platform that helps friends come together to hang out, play games, and have fun. Founded in 2015, Discord has grown to support millions of daily active users, with a focus on gaming and creating spaces for belonging. Security and privacy are essential to Discord's success.

We are looking for a Senior Software Engineer to join our Application Security team and protect Discord’s users where it matters most: their accounts. This position is based in our San Francisco office, with the expectation to be in the office 1-2 days a week.

• Join an engineering team designing and implementing full-stack, user-facing security solutions that protect hundreds of millions of Discord users.
• Lead full-stack work to strengthen session security and authentication for Discord’s users.
• Improve, operate, and maintain security-critical authentication services, owning their correctness and security.
• Partner with Product teams to drive adoption of stronger authentication and ship user-facing account security tools.
• Identify and design solutions for emerging threats to user account security.
• Research and implement new security capabilities for the Discord platform, staying current on the authentication and session security landscape.
• Build security controls and tools that emphasize self-service, automation, and performance to help identify and mitigate account security flaws.

• 5+ years of experience securing production applications.
• 3+ years of experience programming in at least one general-purpose programming language (e.g., Python, Go, Java, or Rust).
• Hands-on experience building and shipping production software, including security features, controls, frameworks, or guardrails.
• Hands-on experience with authentication and account security, such as WebAuthn, passkeys, FIDO2, MFA, and session management.
• Comfortable reasoning about the security of complex systems and giving engineers clear, sound guidance on secure design and implementation.
• Experience leading security projects with a cross-functional group.
• Experience building or hardening client applications, such as desktop or native mobile apps.
• Experience operating in cloud-based environments (we use Google Cloud, but experience with other platforms is okay too).

• Experience programming in at least one systems programming language (e.g., C, C++).
• Experience developing, operating, and debugging production systems.
• Familiarity with common application vulnerabilities on the platforms Discord ships on.

The US base salary range for this full-time position is $196,000 to $245,000 + equity + benefits. Salary ranges are determined by role and level, and individual pay is determined by additional factors including job-related skills, experience, and relevant education or training.

Apply through the provided link. Discord is committed to inclusion and providing reasonable accommodations during the interview process; please let your recruiter know if you need accommodations. See the Applicant and Candidate Privacy Policy for details on Discord’s collection and usage of personal information.