Senior Security Engineer, Discord

• Are you passionate about balancing strong security with seamless operations?
• We’re looking for someone who brings strong technical skills and genuinely cares about protecting data and keeping systems secure
• If you love solving challenging security problems, get energized by learning new things, and want to help make Discord even better, come join our security team on this journey
• 3+ years of experience in an Enterprise Security role as a senior individual contributor or lead
• 3+ years of experience programming in at least one general purpose programming language (e.g., Python, Go, Rust)
• Experience securing, monitoring, and managing Identity and Access Management systems (we use Okta, Kolide, Teleport, and Cloudflare Access)
• Deep understanding of data security in enterprise environments
• Experience working in “zero-trust” network architecture environments
• Experience deploying and managing Mobile Device Management, Endpoint Detection and Response, and device trust tooling
• Knowledge and practical application of IT security best practices
• A great sense of empathy

Desirable

• We are looking for an experienced Senior Enterprise Security Engineer reporting to the Engineering Manager of Enterprise Security
• In this role, you will implement and maintain Discord’s enterprise environment, with a sharp focus on security and privacy
• Design and implement security measures to protect company data from unauthorized access, disclosure, and misuse
• Partner closely with the Detection & Response team to maintain full visibility into enterprise access, networks, and devices
• Deploy and manage security tools across Discord's corporate infrastructure
• Establish security standards that provide strong protection while enabling smooth workflows
• Develop and deliver security awareness training for employees
• Shape and enforce Discord's IT and security policies
• Build secure, sustainable environments using modern principles like "secure by design" and “zero-trust” network architecture, without relying on traditional VPN setups
• Foster a security-conscious culture by guiding employees on data protection best practices
• Partner cross-functionally with IT, Engineering, Workplace, and other teams to achieve security objectives