[All remote jobs](https://jobicy.com/jobs.md)[![Discord logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/02/WRILS-210216185819-522054.jpg)](https://jobicy.com/company/discord.md)[Discord](https://jobicy.com/company/discord.md) # Senior Software Engineer, Application Security Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move. [Apply for this job](#job-application)[View company](https://jobicy.com/company/discord.md)ShareRemote from[USA](https://jobicy.com/job-region/usa.md)SalaryUSD 196k–245k / yrDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceSeniorPublished12 Oct 2026Apply before11 Nov 2026Listing views37Application actions0Application toolkit ## Make your next move. Prepare your resume, explore your fit, and draft a cover letter for this opportunity. AI Summary ## The role, at a glance. This senior application-security engineering role builds and operates full-stack, user-facing protections for Discord account security at very large scale. The engineer will lead work on authentication, session security, security-critical services, and self-service controls that identify and mitigate account-security flaws. Strong practical experience with production application security, secure design, cloud environments, and authentication technologies such as WebAuthn, passkeys, FIDO2, MFA, and session management is required. The role also requires cross-functional technical leadership with product and engineering teams, plus the ability to harden desktop or mobile client applications. It is a U.S. West Coast-based remote full-time opportunity, with a Bay Area office option. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 4/5RelaxedFast-paced ### Autonomy Level 5/5GuidedFull ownership ### Communication Load 5/5IndependentCollaborative AI insightThe role protects authentication and session systems used by hundreds of millions of users, where design mistakes can have severe security and privacy consequences. It requires senior-level ownership across full-stack services, client platforms, emerging threats, and cross-functional adoption. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job medianMarket rate$220,500US market range$190k–$260k0$286k AI insightThe disclosed U.S. annual base-salary range is $196,000–$245,000, with a midpoint of $220,500. This is competitive for a senior application security engineer working on large-scale consumer authentication and account-security systems; a comparable U.S. market base-salary range is approximately $190,000–$260,000, excluding equity and benefits. ## Core skills Skills and capabilities most closely associated with this opportunity. [Application Security](https://jobicy.com/jobs?search_keywords=Application%20Security.md)[Authentication](https://jobicy.com/jobs?search_keywords=Authentication.md)[Session Management](https://jobicy.com/jobs?search_keywords=Session%20Management.md)[WebAuthn](https://jobicy.com/jobs?search_keywords=WebAuthn.md)[Passkeys](https://jobicy.com/jobs?search_keywords=Passkeys.md)[FIDO2](https://jobicy.com/jobs?search_keywords=FIDO2.md)[Multi-Factor Authentication](https://jobicy.com/jobs?search_keywords=Multi-Factor%20Authentication.md)[Secure Software Development](https://jobicy.com/jobs?search_keywords=Secure%20Software%20Development.md)[Cloud Security](https://jobicy.com/jobs?search_keywords=Cloud%20Security.md)[Google Cloud Platform](https://jobicy.com/jobs?search_keywords=Google%20Cloud%20Platform.md) Sample interview questionsHow would you design a secure session-management system for a large consumer platform?I would use short-lived, cryptographically strong session credentials with secure HttpOnly, Secure, and appropriate SameSite cookie settings where applicable. I would implement token rotation, device and session inventory, revocation on sensitive events, anomaly detection, and risk-based reauthentication. I would also define clear telemetry, incident-response procedures, and tests for fixation, replay, theft, and logout/revocation failures. Describe how you would introduce passkeys without disrupting existing users or authentication flows. I would begin with a threat model and compatibility assessment, then add passkeys as an opt-in authentication method alongside existing factors. The rollout would include clear enrollment and recovery paths, support for multiple authenticators, strong account-recovery safeguards, feature flags, and adoption metrics. After validating reliability and user comprehension, I would progressively encourage passkey use while retaining appropriately secured fallback methods. How do you assess the security of an unfamiliar distributed system? I first map trust boundaries, identities, data flows, privileged actions, and external dependencies. I review the architecture and code paths around authentication, authorization, secrets, input handling, and logging, then validate assumptions through targeted tests and threat modeling. I prioritize findings by exploitability and impact, provide actionable remediation guidance, and partner with owners through validation and rollout. Tell us about a time you led a security project across product and engineering teams. I would establish a shared problem statement, measurable security outcomes, owners, and a delivery plan that accounts for product constraints. I communicate the threat and user impact in practical terms, offer secure implementation patterns, and use milestones such as design review, implementation, testing, and staged rollout. This approach helps teams treat security as an enabling product requirement rather than a late-stage blocker. What controls would you build to reduce account takeover risk? I would layer phishing-resistant authentication such as passkeys, secure MFA enrollment and recovery, session binding and revocation, login-risk detection, and notifications for sensitive account changes. I would protect recovery workflows with stronger verification and rate limits, monitor credential-stuffing and automation patterns, and provide users with device/session management. Controls should be continuously measured against account-takeover rates, false positives, and recovery success. Opportunity details ## About this role. Discord has a highly engaged community of millions of daily active users who use the platform for many different reasons, but there’s one thing that nearly everyone does: play video games. Discord plays a uniquely important role in the future of gaming, and we are focused on making it easier and more fun for people to hang out before, during, and after playing games. Discord empowers people to create spaces where they can find a sense of belonging in their lives. Millions of people trust Discord to keep their communications secure, private, and out of the hands of evildoers, so security and privacy are necessary to Discord’s success. We are looking for a Senior Software Engineer to join our Application Security team and protect Discord’s users where it matters most, their accounts. If you are an engineer with a wealth of experience making the secure way the easy way, a deep sense of curiosity, and an endless desire to improve Discord, read on! What you’ll do * Join an engineering team designing and implementing full-stack, user-facing security solutions that protect hundreds of millions of Discord users. * Lead full-stack work to strengthen session security and authentication for Discord’s users. * Improve, operate, and maintain security-critical authentication services, owning their correctness and security. * Partner with Product teams to drive adoption of stronger authentication and to ship user-facing account security tools. * Identify and design solutions for emerging threats to user account security. * Research and implement new security capabilities for the Discord platform, staying current on the authentication and session security landscape. * Build security controls and tools that emphasize self-service, automation, and performance to help identify and mitigate account security flaws. Who you are * You have 5+ years of experience securing production applications. * You have 3+ years of experience programming in at least one general-purpose programming language (e.g., Python, Go, Java, or Rust). * You have hands-on experience building and shipping production software, including security features, controls, frameworks, or guardrails. * You have hands-on experience with authentication and account security, such as WebAuthn, passkeys, FIDO2, MFA, and session management. * You are comfortable reasoning about the security of complex systems, even if they contain components you aren’t familiar with, and can give engineers clear, sound guidance on secure design and implementation. * You have experience leading security projects with a cross-functional group. * You have experience building or hardening client applications, such as desktop or native mobile apps. * You have experience operating in cloud-based environments (we use Google Cloud, but experience with other platforms is okay too). Bonus points * Experience programming in at least one systems programming language (e.g. C, C++). * Experience developing, operating, and debugging production systems. * Familiarity with common application vulnerabilities on the platforms Discord ships on (that’s all of them). This position is West Coast (U.S.) based and can be remote but if you live in the Bay Area, you’re welcome to work from our beautiful SF office. The US base salary range for this full-time position is $196,000 to $245,000 + equity + benefits. Our salary ranges are determined by role and level. Within the range, individual pay is determined by additional factors, including job-related skills, experience, and relevant education or training. Please note that the compensation details listed in US role postings reflect the base salary only, and do not include equity, or benefits. Why Discord? Discord plays a uniquely important role in the future of gaming. We’re a multiplatform, multigenerational and multiplayer platform that helps people deepen their friendships around games and shared interests, and helps developers build and grow their businesses. We believe games give us a way to have fun with our favorite people, whether listening to music together or grinding in competitive matches for diamond rank. Join us in our mission! Your future is just a click away! Discord is committed to inclusion and providing reasonable accommodations during the interview process. We want you to feel set up for success, so if you are in need of reasonable accommodations, please let your recruiter know. Please see our Applicant and Candidate Privacy Policy for details regarding Discord’s collection and usage of personal information relating to the application and recruitment process by clicking [HERE.](https://discord.com/terms/applicant-candidate-privacy-policy) Show more [Apply now >](https://jobicy.com/jobs/155131-senior-software-engineer-application-security.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. * ![Huntress logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/91eae3ae-221.jpg) Huntress Oct 12 New ### [Security Operations Analyst- Ireland](https://jobicy.com/jobs/155141-security-operations-analyst-ireland.md) What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at… * ![TRM Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/34aa038c-221.png) TRM Labs Oct 12 New ### [Senior Blockchain Intelligence Analyst, Ransomware](https://jobicy.com/jobs/155136-senior-blockchain-intelligence-analyst-ransomware.md) Build a Safer World. TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM’s platforms enable investigators to trace illicit activity, build… * ![Huntress logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/91eae3ae-221.jpg) Huntress Oct 12 New ### [Manager, Security Operations Center – EMEA](https://jobicy.com/jobs/155134-manager-security-operations-center-emea.md) What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at… * ![UpGuard logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/474a12c7-221.png) UpGuard Oct 12 New ### [Staff Product Security Engineer](https://jobicy.com/jobs/155088-staff-product-security-engineer-2.md) Who are we? At UpGuard, we are replacing manual security bottlenecks with AI-driven precision. Fresh off a US$75M Series C, we are scaling our infrastructure to process 100 billion risk… * ![Cision logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/e9661342-221.jpeg) Cision Oct 12 New ### [Senior Security Engineer](https://jobicy.com/jobs/155075-senior-security-engineer.md) At Cision, we believe in empowering every individual to make an impact. Here, your voice is heard, your ideas are valued, and your unique perspective fuels our collective success. As… * ![Five9 logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/7c3d754e-221.png) Five9 Oct 12 New ### [Staff Information Security Engineer](https://jobicy.com/jobs/155070-staff-information-security-engineer.md) Join us in bringing joy to customer experience. Five9 is a leading provider of cloud contact center software, bringing the power of cloud innovation to customers worldwide. Living our values… * ![Stripe logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/10/WRILS-201011073943-272457.png) Stripe Oct 12 New ### [Abuse Research Engineer](https://jobicy.com/jobs/153053-abuse-research-engineer.md) Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow… * ![TRM Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/34aa038c-221.png) TRM Labs Oct 11 New ### [Senior / Staff Intelligence Analyst, Environmental Crimes](https://jobicy.com/jobs/155032-senior-staff-intelligence-analyst-environmental-crimes.md) Build a Safer World. TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM’s platforms enable investigators to trace illicit activity, build… * ![Databricks logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/12/4e3f864ba9cf3c62d471e1c62414d098.jpg) Databricks Oct 11 New ### [Staff Security Engineer, Incident Response](https://jobicy.com/jobs/155021-staff-security-engineer-incident-response.md) RDQ327R180 Staff Security Engineer, Incident Response The Incident Response team’s mission is to respond to security threats, incidents and investigations to protect our customers, employees and enterprise data in a… * ![Resilience logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/e67f0de9-221.png) Resilience Oct 11 New ### [Tabletop Exercise (TTX) Specialist – Cybersecurity Focus](https://jobicy.com/jobs/154999-tabletop-exercise-ttx-specialist-cybersecurity-focus.md) About Us At Resilience, we’re creating a new category that integrates cybersecurity, cyber insurance, and cyber risk management. Founded in 2016 by experts from across the highest tiers of the… [Browse all jobs](https://jobicy.com/jobs.md)