About the Role
About the Role
As a Senior Application Security Engineer at Discord, you will be responsible for enhancing the security of our applications by conducting threat modeling, secure design reviews, and improving AppSec tooling. You will collaborate closely with engineering teams to address security findings and ensure robust application security practices.
What You'll Do
- Conduct threat modeling and secure design reviews with product and platform teams.
- Build and improve AppSec tooling including SAST, DAST, and dependency scanning.
- Work directly with engineering teams to remediate security findings.
Who You Are
You have hands-on AppSec experience, are comfortable reading and reviewing code across multiple languages, and possess sound judgment in prioritizing real risks over checklist security.
Interview Process
The interview process includes a recruiter call, coding round, hiring manager interview, virtual onsite, and a decision.
Stack
Our technology stack primarily includes Python, with some TypeScript/React, Rust, and occasional JavaScript, running on GCP.
Requirements
Application Security Experience
Hands-on experience in application security beyond compliance.
Code Review Skills
Ability to read and review code across multiple programming languages.
Threat Modeling
Experience in conducting threat modeling and secure design reviews.
Nice to Have
Experience with Rust is a plus.
Familiarity with Google Cloud Platform is beneficial.