Reposted: Staff Software Engineer, Platform Security

Staff Software Engineer, Platform Security

Location: San Francisco, CA (Remote)

Company: Discord

Job Type: Full-time

About the Role:

Discord is seeking a Staff Software Engineer to join their Platform Security Engineering team. This team is dedicated to ensuring security and privacy for Discord’s 200 million monthly active users. As a Staff Software Engineer, you will focus on advancing Discord’s security strategies, software development, and operational excellence.

In this role, you will help secure the platform by creating “paved paths” for managing identities and access, shipping code, configuring cloud infrastructure, and operating services. You will report to the Platform Security Engineering Manager and collaborate across engineering teams to ensure security best practices and safeguard systems.

If you're passionate about security, enjoy working on technical and social projects, and want to improve Discord, this is the role for you!

Key Responsibilities:

• Lead and guide strategy: Drive software engineering projects on a small, highly-autonomous security team, influencing security practices across engineering.
• Consult on security matters: Assess risks, advise on architectural designs, perform code reviews, and balance security with business needs.
• Develop secure baselines: Implement best-in-class security protocols for both cloud and on-premise resources.
• Secure software supply chain: Safeguard the flow of code from developer laptops to production environments through version control, CI/CD, etc.
• Build and maintain IAM systems: Develop user-friendly identity and access management (IAM) systems with an emphasis on least privilege.
• Collaborate cross-functionally: Partner with teams for security monitoring, incident response, and securing product engineering growth.

Example Projects:

• Enhance IAM solutions at Discord.
• Develop automated tooling to scan infrastructure for vulnerabilities.
• Integrate service-to-service authentication/authorization into Discord's next-generation developer platform.

What You Should Have:

• 7+ years of experience building and operating production systems and infrastructure.
• 5+ years of experience writing software in languages like Python and Rust.
• 4+ years of experience securing systems with millions of users.
• Experience as a tech lead for projects with 3+ engineers.
• Proficiency in cloud-based environments (e.g., GCP, Cloudflare).
• Experience with container technologies like Docker and Kubernetes.
• Knowledge of modern authentication protocols (RBAC, OAuth 2.0, OIDC/SAML).
• Familiarity with CI/CD technologies (e.g., Bazel, Buildkite, Terraform).

Bonus Points:

• Familiarity with tools to increase team impact.
• Experience securing multi-cloud environments.
• Experience with service meshes (e.g., Envoy, Istio).
• Experience securing bare-metal hosts or VMs.
• Knowledge of Kubernetes security policies.

Compensation:

• Base salary range: $248,000 - $279,000 per year, plus equity and benefits.
• Compensation is based on role, level, skills, experience, and education.

Why Discord?:

Discord is integral to the gaming community, providing a multiplatform, multiplayer platform that helps users connect, play, and share experiences. By joining Discord, you'll play a key role in shaping the future of social and gaming communications.