2 months ago
Base Salary
$196k - $221k/yr
Responsibilities
- Design and implement full-stack, user-facing security solutions protecting Discord users.
- Lead full-stack work to strengthen session security and authentication.
- Improve, operate, and maintain security-critical authentication services with ownership of their correctness and security.
- Partner with Product teams to drive adoption of stronger authentication and ship account security tools.
- Identify and design solutions for emerging user account security threats.
- Research and implement new authentication and session security capabilities.
- Build self-service, automated, and performant security controls and tools to identify and mitigate account security flaws.
Requirements
- At least 5 years of experience securing production applications.
- At least 3 years of experience programming in a general-purpose language such as Python, Go, Java, or Rust.
- Hands-on experience building and shipping production software, including security features, controls, frameworks, or guardrails.
- Hands-on experience with authentication and account security, including WebAuthn, passkeys, FIDO2, MFA, or session management.
- Ability to reason about complex-system security and provide clear guidance on secure design and implementation.
- Experience leading security projects with cross-functional groups.
- Experience building or hardening desktop or native mobile client applications.
- Experience operating in cloud-based environments; Discord uses Google Cloud.
- Bonus: experience with C or C++, developing, operating, and debugging production systems, and familiarity with application vulnerabilities across Discord’s platforms.
Benefits
- US-based only; full-time position
- Equity and benefits are offered
- Inclusive interview process with reasonable accommodations available
About Discord
Discord builds a voice, video, and text chat platform organized around servers for gaming and interest-based communities. It monetizes through Nitro subscriptions, server subscriptions, and digital goods, and offers a developer platform for bots and apps. Founded in 2015 and headquartered in San Francisco, it is privately held and used by over 200 million people monthly.