Senior Software Engineer, Application Security
Discord
Discord builds a platform for communities across desktop, mobile, games and third-party apps. This role is a hands-on application security engineering position focused on building security features that protect user accounts, strengthening authentication and session security, and improving security-critical services.
What you’ll do
- Build security features that protect user accounts
- Strengthen authentication and session security
- Improve security-critical services
- Work directly with product teams to ship user-facing account security tools
- Address emerging threats
What they’re looking for
- Hands-on application security experience (not just compliance)
- Comfort reading and writing code across languages
- Experience shipping production software
- Sound judgment on prioritizing real risk over checklist security
- Experience with authentication, passkeys, MFA, or session management is especially relevant
Skills
- Python: Python, primarily
- TypeScript: TypeScript, React
- React: React, TypeScript
- Rust: Rust, some
- JavaScript: JavaScript, occasional
- Google Cloud Platform: GCP, runs on GCP
- Authentication: authentication, passkeys, MFA, session management
- Application Security: AppSec, hands-on AppSec experience
The post
Discord | Senior Software Engineer, Application Security | REMOTE (US West Coast) or San Francisco, CA | $196K-$245K base + equity
Discord is where communities and friend groups spend time together, on desktop, mobile, and now more and more inside games and third-party apps built on our platform. That surface area, plus a huge, engaged, occasionally adversarial user base, makes application security a genuinely hard and interesting problem here.
We are hiring a Senior Software Engineer to join the Application Security team. This is hands-on product engineering: building security features that protect user accounts, strengthening authentication and session security, and improving security-critical services. You will work directly with product teams to ship user-facing account security tools and address emerging threats.
Stack: Python primarily, some TypeScript/React, some Rust, occasional JavaScript. Runs on GCP.
Looking for: hands-on AppSec experience (not just compliance-flavored security), comfort reading and writing code across languages, experience shipping production software, and sound judgment on prioritizing real risk over checklist security. Experience with authentication, passkeys, MFA, or session management is especially relevant.
Location: Remote from the US West Coast. If you are in the Bay Area, our SF office is an option. Relocation to the Bay Area is not required.
Interview process: recruiter call, coding round, HM interview, virtual onsite, decision.