Discord is about giving people the power to create space to find belonging in their lives. Trusted by millions of people to keep their communications secure, private, and out of the hands of evildoers, security and privacy are necessary to Discord’s success.

We are looking for a Senior Security Engineer, Platform Security reporting to the Platform Security Engineering Manager to join us in building a secure and private platform for Discord’s users. If you are a Security Engineer with a passion for security and privacy, a deep sense of curiosity, and an endless desire to improve Discord, read on!

What you’ll be doing

• Secure our software supply chain; all the way from a developer’s laptop, through version control, CI/CD, and into production
• Develop best-in-class secure baselines for cloud and bare-metal resources.
• Develop automation to scale the capabilities of yourself and our team as we build.
• Perform reviews ranging from architectural design to threat modeling and source code level assessments, providing recommendations to make our platform and infrastructure more secure
• Work with our Detection and Response team to ensure that we’re adequately monitoring the security of the systems that Discord builds.
• Partner with Anti-Abuse and Trust & Safety to improve our ability to yeet and delete bad actors from Discord

Example Projects

• Manage all access and IAM at Discord in scalable ways with platform solutions. For more information, please check out our blog post: https://discord.com/blog/access-a-new-portal-for-managing-internal-authorization
• Build automated tooling to scan across our infrastructure for vulnerabilities including container images and infrastructure-as-code
• Design and implement security controls for a next-generation developer platform for building apps and services at Discord
• Partner with Engineering to design and build authentication in service-to-service communication

What you should have

• 5+ years experience building and/or securing production systems and infrastructure.
• 3+ years of experience as a Security Engineer working on systems with millions of users.
• 3+ years of experience programming in at least one general purpose programming language (we mainly use Python and Rust, but your experience with other languages is great, too!).
• You have experience building images for deploying code (e.g. Docker images).
• You have experience securing cloud-based environments (we use Google Cloud).
• You have experience with infrastructure-as-code tooling (we use Terraform).
• You have experience with container orchestration technologies (e.g. Kubernetes).
• You have experience with serverless technologies (e.g. Cloudflare Workers).

Bonus points

• Experience building and operating a service mesh (e.g. Envoy, Istio, Linkerd).
• Experience with or an understanding of modern authentication and authorization protocols and concepts (OAuth 2.0, OIDC, WebAuthn/FIDO2, Zero Trust, mTLS).
• Experience building complex applications and services on top of Google Cloud Platform.

The US base salary range for this full-time position is $183,000 to $201,500 + equity + benefits. Our salary ranges are determined by role and level. Within the range, individual pay is determined by additional factors, including job-related skills, experience, and relevant education or training. Please note that the compensation details listed in US role postings reflect the base salary only, and do not include equity, or benefits.

#LI-Remote