Senior Security Engineer, Duolingo
$196-354k
Offers equity
Language education platform
Job no longer available
Language education platform
1001+ employees
Job no longer available
$196-354k
Offers equity
1001+ employees
Company mission
Duolingo's mission is to give everyone access to a private tutor experience through technology, making learning fun and providing universal access to language education.
Role
Who you are
- Experience deploying, managing, and troubleshooting security scanning tools in the CI/CD pipeline
- Familiarity with Linux system administration, automation, and Python programming
- A desire to learn more about security and develop the foundational building blocks of the program
- Strong collaboration, emotional intelligence, and communication skills
- A Bachelor’s degree in Computer Science or related technical field
- Proven experience developing and maintaining microservices
- 2+ years working on collaborative development teams
- Experience in product, application, or cloud security
- Willingness to work in both backend engineering and operational engineering dependent on the needs of the organization
Desirable
- Familiarity with containerization runtimes (Docker, rkt)
- Experience securing a large infrastructure on AWS
- Threat modeling experience across various architectures and understand how to align those with business goals
- Demonstrable experience in designing and managing multi-account cloud environments
- Experience communicating sophisticated technical requirements to audiences of variable technical sophistication
- Experience working in Terraform, developing modules and creating secure by default configurations
- Familiarity with security scanning tools such as SemGrep, Nuclei, Trufflehog, and Checkov
What the job involves
- Join Duolingo as a Security Engineer and play a pivotal role in safeguarding our systems, employees, learner data, and services across our rapidly growing language learning platform
- Your expertise will be critical in maintaining the highest security standards, while continuously enhancing our infrastructure security and ensuring compliance
- Design and develop scalable monitoring and response systems for security alerts to proactively mitigate risks
- Continuously evaluate Duolingo's security posture, anticipating future threats and devising appropriate countermeasures
- Collaborate with development teams to conduct threat modeling, identify risks, and provide guidance on mitigations
- Be a partner to our security champions, organizing and growing the program across Duolingo to ensure the efficient distribution of security knowledge
- Implement dependency checks for open-source software within applications
- Participate in regular product security tabletops with organizational partners
- Work on deploying early alerting systems throughout our environment and the responsive automations that trigger when they alert
- Develop a continuous verification and testing system for security controls and critical features
- Work with our partners in finance to ensure we maintain compliance with our regulatory obligations
- Collaborate with IT to improve the security of our offboarding processes by introducing automation and well documented procedures
Our take
Duolingo is a free to use language learning app, offering 95 courses across 38 distinct languages. It is the most downloaded education app in the history of the App Store and has previously been awarded Apple's iPhone App of the Year and Android's Best of the Best.
With over 500 million learners, the company has unprecedented data insights on how people learn. Its team of language learning scientists, machine learning engineers, and AI experts use this data to constantly improve its effectiveness.
Alongside language courses, the company has created the Duolingo English Test which is an affordable and convenient language certification option accepted by more than 2,000 universities and institutions worldwide. Since its 2021 IPO, Duolingo has shown strong momentum and regular changes to the app have brought increased user engagement, retention, and stronger conversion.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Few candidates hear
back within 2 weeks
54% female employees
15% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
Nov 2020
$35m
LATE VC
Apr 2020
$10m
LATE VC
Total funding: $183.3m
Company benefits
- Medical, dental, and vision for employees as well as eligible partners and dependents
- Mental health benefits such as therapy sessions and coaching to support you to be your best self
- Fertility benefits to support your family planning journey
- Fully paid parental and adoption leave
- Fully paid subscription to Care.com and paid backup days for dependents and your fur family
- 401(k) with generous match and immediate vesting
- 20 days of paid time off, with two additional weeks off for winter break
- First-time home buyer bonus (in Pittsburgh)
- Competitive salaries and equity
- Yearly stipend for professional development
- Transportation reimbursement for however you get to work
- Lunch prepared daily by our in-house chefs
- Annual international retreat for all full-time employees
- Monthly events celebrating our team and their amazing work
- On-site gym and massages
- Game room for taking brain breaks
Company values
- Learners First - Our mission and reason for existing is to make sure everyone in the world has access to high-quality education
- Take The Long View - If it works in the short-term but hurts Duolingo in the long-term, it's not right. We make decisions that keep us moving toward our big goals
- Prioritize Ruthlessly - We have millions of learners and only hundreds of employees, so our work must focus on initiatives that have high return on investment. Make your time matter
- Ship It - For a good idea to become reality, it needs a plan and a sense of urgency. So go go go!
- Test Everything - We measure and test everything so we can make informed decisions based on data
- We Haven’t Won Yet - Until every person who wants to learn is doing so with Duolingo, we need to keep innovating, pushing the envelope, and learning ways to get better
- Strive For Excellence - To change how the world learns, we must do world-class work. From the people we hire to the features we ship, we never settle for just okay
- All For One, One For All - We stay engaged and make choices that benefit the greater good-because Duolingo's success is our success
- Be Candid And Kind - We build things together with transparency and care for each other. We offer feedback compassionately but with excellence in mind, and receive it openly and as an opportunity to grow
Company HQ
East Liberty, Pittsburgh, PA
Articles
Leadership
Luis von Ahn
(CEO)Professor at Carnegie Mellon University and founder of CAPTCHA and reCAPTCHA sold to Google.
Severin Hacker
(CTO)PhD in computer science from Carnegie Mellon University.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 10 more jobs at Duolingo