Discord

Overview

We are looking for a Senior Software Engineer to join our Application Security team and protect Discord’s users where it matters most, their accounts.

About Discord

Discord has a highly engaged community of millions of daily active users who use the platform for many different reasons, but there’s one thing that nearly everyone does: play video games. Discord plays a uniquely important role in the future of gaming, and we are focused on making it easier and more fun for people to hang out before, during, and a

Requirements & Eligibility

• You have 5+ years of experience securing production applications.
• You have 3+ years of experience programming in at least one general-purpose programming language (e.g., Python, Go, Java, or Rust).
• You have hands-on experience building and shipping production software, including security features, controls, frameworks, or guardrails.
• You have hands-on experience with authentication and account security, such as WebAuthn, passkeys, FIDO2, MFA, and session management.
• You are comfortable reasoning about the security of complex systems.
• You have experience leading security projects with a cross-functional group.
• You have experience building or hardening client applications, such as desktop or native mobile apps.
• You have experience operating in cloud-based environments (we use Google Cloud, but experience with other platforms is okay too).

Key Responsibilities

• Join an engineering team designing and implementing full-stack, user-facing security solutions that protect hundreds of millions of Discord users.
• Lead full-stack work to strengthen session security and authentication for Discord’s users.
• Improve, operate, and maintain security-critical authentication services, owning their correctness and security.
• Partner with Product teams to drive adoption of stronger authentication and to ship user-facing account security tools.
• Identify and design solutions for emerging threats to user account security.
• Research and implement new security capabilities for the Discord platform, staying current on the authentication and session security landscape.
• Build security controls and tools that emphasize self-service, automation, and performance to help identify and mitigate account security flaws.