{"id":557700,"url":"https://alion.io/job/discord-senior-platform-security-engineer","title":"Senior Platform Security Engineer","company":{"id":1167,"name":"Discord","domain":"discord.com","url":"https://alion.io/company/cow-dao","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":89,"open_postings":7,"ghost_share":0,"stale_share":0.429,"repost_share":0,"time_to_fill_p50_days":57,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":196000,"max":245000,"currency":"USD","period":"year","gross":null,"usd_annual":245000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Cloudflare","optional":false},{"name":"Discord","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"PKI","optional":false},{"name":"Python","optional":false},{"name":"Rust","optional":false},{"name":"Teleport","optional":false},{"name":"TypeScript","optional":false},{"name":"Zero Trust","optional":false},{"name":"Bazel","optional":true},{"name":"Buildkite","optional":true},{"name":"Docker","optional":true},{"name":"Envoy","optional":true},{"name":"Istio","optional":true},{"name":"Kubernetes","optional":true},{"name":"Linux","optional":true},{"name":"Service Mesh","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-09-08T19:08:05Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-11-04T04:43:04Z","board_verified":true,"closed_at":null,"days_open":56,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":56},"description":"Discord has a highly engaged community of millions of daily active users who use the platform for many different reasons, but there’s one thing that nearly everyone does: play video games. Discord plays a uniquely important role in the future of gaming, and we are focused on making it easier and more fun for people to hang out before, during, and after playing games.\nMore broadly, Discord is about empowering people to find belonging in all kinds of communities, and those people trust us to keep their communications safe. Our Platform Security Engineering team protects the systems we use to create Discord, making the \"secure way\" the \"easy way.\"\nWe're looking for a Senior Engineer to advance this mission through security expertise, software development, and operational excellence, with a particular focus on identity and access management: who and what can access Discord's systems, how they authenticate, and how access stays scoped to what's actually needed. You'll help identify leveraged opportunities to reduce security risk across Engineering, then design and deliver technical solutions: lovable \"paved paths\" for managing identities and access, shipping code, configuring cloud infrastructure, and operating services.\nIf you're a security engineer with a deep interest in identity and access management, who's eager to own technically and socially complex projects, and excited to improve security and privacy at Discord, read on!\nThis position is based in our San Francisco office. For this role, the Hiring Manager would like folks to be in the office 1-2 days a week.\nWhat you'll do\nOwn software engineering projects end-to-end on a highly autonomous, horizontally integrated team with a lot of leverage. This is a code-forward role!\nDefine what identity means for autonomous agents and other non-human actors at Discord (how they're provisioned, scoped, authenticated, authorized, and audited). As the role of these actors grows, and create primitives to implement that vision.\nBuild and evolveAccess, Discord's employee authorization platform, to make permissions discoverable, role-based, least privilege, and self-serve; check out ourblog post to learn more!\nDesign and harden our Zero Trust architecture, spanning human and service-to-service auth*n for Discord’s internal tooling.\nAutomate continuous permission right-sizing in the spirit of least privilege.\nDevelop and apply secure baselines for cloud identity, and help secure our software supply chain from the dev environment through CI/CD and into production.\nConsult on risk assessments, architectural designs, threat models, code reviews, and more, pragmatically balancing security with other business considerations.\nExample projects\nIntegrate service-to-service and agent-to-service authentication and authorization as out-of-the-box features in Discord's internal developer platform.\nBuild out service identity provisioning using PKI and mTLS, so services can authenticate each other without shared secrets.\nEvaluate or extend infrastructure access tooling such as Teleport for short-lived, auditable access to hosts, databases, and internal systems.\nImprove how secrets are issued, rotated, and scoped across our infrastructure.\nWhat we look for\n5+ years of experience building and operating production systems or infrastructure\n3+ years of experience writing software in a general-purpose programming language (we mainly use Python, TypeScript, and Rust)\n3+ years of experience securing systems with millions of users\nExperience building or operating identity and access management systems: authentication, authorization, or access control at scale\nUnderstanding of modern authentication and authorization concepts (e.g. RBAC, OAuth, OIDC, SSO, Zero Trust network architectures, mTLS, cloud IAM)\nExperience building in and securing multi-cloud environments (e.g. GCP, Cloudflare, AWS)\nExperience designing and building software for customers (internal or external) beyond your immediate team\nBonus points if you have…\nExperience defining and orchestrating containers (e.g. via Kubernetes, Docker, Distroless, OCI)\nFamiliarity with build and CI/CD technologies (e.g. Terraform, Bazel, Buildkite)\nProvisioned or managed service and workload identity using PKI, including issuing and operating mTLS between services\nExperience with Zero Trust platforms such as Cloudflare Access and Teleport, for auditable access to apps, hosts, and internal systems\nExperience with secrets management systems (e.g. Vault, or a cloud KMS or secrets manager), including rotation and least-privilege access to secrets\nDeveloped and debugged distributed systems atop GCP, Cloudflare, and/or AWS\nLed complex migrations or risk management programs across an engineering organization\nBuilt or operated a service mesh (e.g. Envoy, Istio)\nManaged and secured VMs or bare-metal hosts (e.g. Linux, Salt)\nPractices to discover industry tools and knowledge that can multiply your team's impact\nThe base salary range for this full-time position is listed below. This position will also be eligible for equity and benefits. Our salary ranges are determined by role and level. Within the range, individual pay is determined by additional factors, including job-related skills, experience, and relevant education or training. Please note that the compensation details listed in role postings reflect the base salary only, and do not include equity, or benefits.\nBase Salary\n$196,000—$245,000 USD\nWhy Discord? \nDiscord plays a uniquely important role in the future of gaming. We're a multiplatform, multigenerational and multiplayer platform that helps people deepen their friendships around games and shared interests, and helps developers build and grow their businesses. We believe games give us a way to have fun with our favorite people, whether listening to music together or grinding in competitive matches for diamond rank. Join us in our mission! Your future is just a click away!\nDiscord is committed to inclusion and providing reasonable accommodations during the interview process. We want you to feel set up for success, so if you are in need of reasonable accommodations, please let your recruiter know.\nPlease see our Applicant and Candidate Privacy Policy for details regarding Discord’s collection and usage of personal information relating to the application and recruitment process by clicking HERE.","description_format":"text","description_chars":6372,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Online Forums & Community Platforms","Messaging Apps","Social Networks"],"lifecycle":[{"event":"open","at":"2026-09-09T00:08:59Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 29 · green card filings: 6","filings_12m":29,"filings_prev_12m":32,"green_card_filings_12m":6,"median_offered_wage_usd":254071,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":2}],"liveness":{"score":61,"band":"ok","label":"Likely open","p_open":1,"p_active":0.816,"p_room":0.75,"age_days":56,"expected_fill_days":57,"reasons":["conf:1","win:late"],"computed_at":"2026-11-04T06:34:25Z"},"pay":{"stated_usd_annual":245000,"is_top_pay":true},"html_url":"https://alion.io/job/discord-senior-platform-security-engineer","json_url":"https://alion.io/job/discord-senior-platform-security-engineer.json","meta":{"generated_at":"2026-11-04T07:10:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11229,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1167},"rest":"https://alion.io/mcp/rest/get_company?id=1167"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdiscord-senior-platform-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdiscord-senior-platform-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdiscord-senior-platform-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/discord-senior-platform-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdiscord-senior-platform-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":557700}},{"tool":"search_jobs","arguments":{"company":"discord.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":557700},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}