Staff Software Engineer, Platform Security

More broadly, Discord is about empowering people to find belonging in all kinds of communities, and those people trust us to keep their communications safe. Our Platform Security Engineering team protects the systems we use to create Discord, making the “secure way” the “easy way.”

We’re looking for a Staff Engineer to advance this mission through security expertise, software development, and operational excellence. In this technical leadership role, you’ll articulate and pursue the most leveraged opportunities to reduce security risk across Engineering, designing and building lovable “paved paths” for managing identities and access, shipping code, configuring cloud infrastructure, and operating services.

If you’re a security engineer who’s deeply curious, eager to own technically and socially complex projects, and excited to improve security and privacy at Discord, read on!

What you'll do

• Shape company-wide security strategy and lead software engineering projects on a highly-autonomous and horizontally-integrated team with a lot of leverage. This is a code-forward role!
• Develop and apply best-in-class secure baselines for cloud infrastructure.
• Secure first- and third-party software supply chains, from the dev environment through CI/CD and into production.
• Build and own identity and access management (IAM) systems that are user-friendly and promote least privilege.
• Manage infrastructure vulnerabilities while supporting rapid growth for Engineering.
• Consult on risk assessments, architectural designs, threat models, code reviews, and more—pragmatically balancing security with other business considerations.

Example projects

• Support IAM with scalable platform solutions (check out https://discord.com/blog/access-a-new-portal-for-managing-internal-authorization).
• Build tooling to prevent and address vulnerabilities across our infrastructure.
• Integrate service-to-service authentication and authorization into Discord’s internal developer platform.