Senior Security Engineer, Platform Security

• Perform reviews ranging from architectural design to threat modeling and source code level assessments, providing recommendations to make our platform and infrastructure more secure
• Secure our software supply chain; all the way from a developer’s laptop, through version control, CI/CD, and into production
• Work with our Detection and Response team to ensure that we’re adequately monitoring the security of the systems that Discord builds.
• Develop automation to scale the capabilities of yourself and our team as we build.
• Develop best-in-class secure baselines for cloud and bare-metal resources.
• Partner with Anti-Abuse and Trust & Safety to improve our ability to yeet and delete bad actors from Discord

• Build automated tooling to across our infrastructure for vulnerabilities including container images and infrastructure-as-code
• Design and implement security controls for a next-generation developer platform for building apps and services at Discord
• Partner with Engineering to design and build authentication in service-to-service communication
• Expand our malware detection capabilities to build a safer Discord

• You have 5+ years experience building and/or securing production systems and infrastructure.
• You have 3+ years of experience as a Security Engineer working on systems with millions of users.
• You have 3+ years of experience programming in at least one general purpose programming language (we mainly use Python and Rust, but your experience with other languages is great, too!)
• You have experience building images for deploying code (e.g. Docker images)
• You have experience securing cloud-based environments (we use Google Cloud).
• You have experience with infrastructure-as-code tooling (we use Terraform).
• You have experience with container orchestration technologies (e.g. Kubernetes).
• You have experience with serverless technologies (e.g. Cloudflare Workers)

• Experience building and operating a service mesh (e.g. Envoy, Istio, Linkerd).
• Experience with or an understanding of modern authentication and authorization protocols and concepts (OAuth 2.0, OIDC, WebAuthn/FIDO2, Zero Trust, mTLS).
• Experience building complex applications and services on top of Google Cloud Platform

New York City only: Minimum salary of $186,000/year + equity and  benefits 

• Comprehensive medical insurance including Health, Dental and Vision (plus up to $20,000 for gender affirmation procedures)
• Mental health resources and quarterly wellness stipends
• 16+ paid holidays, 4 weeks of PTO + use-what-you-need sick days 
• Paid parental leave (plus fertility, adoption and other family planning benefits)
• Flexible long-term work options (remote and hybrid)
• Volunteer time off
• A diverse slate of Employee Resource Groups 
• Plus commuter contributions and other perks for office-based employees

Discord is a voice, video and text app that helps friends and communities come together to hang out and explore their interests — from artists and activists, to study groups, sneakerheads, plant parents, and more. With 150 million monthly users across 19 million active communities, called servers, Discord has grown to become one of the most popular communications services in the world. Discord was built without selling ads or user data and instead, offers a premium subscription called Nitro that gives users special perks like higher quality streams and fun customizations.

We’re working toward an inclusive world where no one feels like an outsider, where genuine human connection is a click, text chat, or voice call away. A place where everyone can find belonging. Challenging? Heck yes. Rewarding? Double heck yes. It’s a mission that gives us the chance to positively impact millions of people all over the world. So if this strikes a chord with you, come build belonging with us!