高级软件工程师,应用安全
查看雇主原标题
Senior Software Engineer, Application SecurityDiscord · San Francisco Bay Area · $196k – $245k
职位信息来自雇主公开的招聘页面。申请前请务必在雇主官网核实详情。
为什么值得关注?
发现指数 63/100,仅依据与该职位一起存储的证据计算。
- 新的雇主官方职位
- 已披露薪资
- 检测到搬迁支持关键词
分数构成
- 时效性 (随职位发布时间变化)+18
- 雇主官方来源+15
- 已披露薪资+15
- 提及搬迁+6
- 稀有职位+1
- 公司来源健康度+8
该职位未包含:远程职位、提及签证担保、未出现在监控的职位板上。
这些理由来自雇主自己的职位描述与我们核实过的来源检查结果。除了已存储的信号之外,我们不做任何推测。
职位描述
机器翻译Discord 拥有一个高度活跃的社区,每天有数百万活跃用户出于各种不同原因使用该平台,但几乎每个人都会做一件事:玩电子游戏。Discord 在游戏的未来中扮演着独特而重要的角色,我们专注于让人们更轻松、更有趣地在玩游戏之前、期间和之后一起消磨时光。
Discord 让人们能够创建空间,在其中找到生活中的归属感。数百万人信任 Discord 来确保他们的通信安全、私密,不落入坏人之手,因此安全与隐私对 Discord 的成功至关重要。
我们正在寻找一位高级软件工程师加入我们的应用安全团队,在最重要的地方保护 Discord 用户,也就是他们的账户。如果你是一位拥有丰富经验的工程师,能够让安全的方式成为简单的方式,拥有强烈的好奇心,并怀有不断改进 Discord 的无穷愿望,请继续阅读!
该职位设在我们旧金山的办公室。对于这个职位,招聘经理希望员工每周到办公室 1-2 天。
岗位职责
• 加入一个工程团队,设计和实现面向用户的全栈安全解决方案,保护数亿 Discord 用户。
• 主导全栈工作,以加强 Discord 用户的会话安全和身份验证。
• 改进、运营和维护安全关键型身份验证服务,对其正确性和安全性负责。
• 与产品团队合作,推动更强身份验证的采用,并交付面向用户的账户安全工具。
• 识别用户账户安全面临的新兴威胁并设计解决方案。
• 为 Discord 平台研究和实现新的安全能力,紧跟身份验证和会话安全领域的最新发展。
• 构建强调自助服务、自动化和性能的安全控制与工具,以帮助识别和缓解账户安全缺陷。
任职要求
• 你拥有 5 年以上保护生产应用程序安全的经验。
• 你拥有 3 年以上使用至少一种通用编程语言(例如 Python、Go、Java 或 Rust)编程的经验。
• 你拥有构建和交付生产软件的实践经验,包括安全功能、控制、框架或防护措施。
• 你拥有身份验证和账户安全的实践经验,例如 WebAuthn、passkeys、FIDO2、MFA 和会话管理。
• 你能够自如地推理复杂系统的安全性,即使其中包含你不熟悉的组件,并且能够就安全设计和实现向工程师提供清晰、可靠的指导。
• 你拥有领导跨职能团队开展安全项目的经验。
• 你拥有构建或加固客户端应用程序的经验,例如桌面或原生移动应用。
• 你拥有在云环境中运营的经验(我们使用 Google Cloud,但其他平台的经验也可以)。
加分项
• 拥有使用至少一种系统编程语言(例如 C、C++)编程的经验。
• 拥有开发、运营和调试生产系统的经验。
• 熟悉 Discord 所发布平台上的常见应用程序漏洞(也就是所有平台)。
候选人必须居住在旧金山湾区(Alameda、Contra Costa、Marin、Napa、San Francisco、San Mateo、Santa Clara、Solano 和 Sonoma 县),或愿意搬迁至该地区。可能提供搬迁协助。
该全职职位在美国的基本薪资范围为 $196,000 至 $245,000 + 股权 + 福利。我们的薪资范围由职位和级别决定。在该范围内,个人薪酬由其他因素决定,包括与工作相关的技能、经验和相关教育或培训。请注意,美国职位发布中列出的薪酬详情仅反映基本薪资,不包括股权或福利。 为什么选择 Discord?
Discord 在游戏的未来中扮演着独特而重要的角色。我们是一个多平台、多代际和多玩家的平台,帮助人们围绕游戏和共同兴趣加深友谊,并帮助开发者构建和发展他们的业务。我们相信游戏为我们提供了一种与我们最喜欢的人一起享受乐趣的方式,无论是一起听音乐,还是在竞技比赛中努力冲击钻石段位。加入我们的使命吧!你的未来只需点击一下!
Discord 致力于包容性,并在面试过程中提供合理便利。我们希望你能为成功做好准备,因此如果你需要合理便利,请告知你的招聘人员。
请点击此处查看我们的申请人和候选人隐私政策,了解有关 Discord 在申请和招聘过程中收集和使用个人信息的详情。
以上内容由机器翻译自动生成,可能存在错误;投递前请以雇主原文为准。
查看雇主原文
职位描述
Discord has a highly engaged community of millions of daily active users who use the platform for many different reasons, but there’s one thing that nearly everyone does: play video games. Discord plays a uniquely important role in the future of gaming, and we are focused on making it easier and more fun for people to hang out before, during, and after playing games.
Discord empowers people to create spaces where they can find a sense of belonging in their lives. Millions of people trust Discord to keep their communications secure, private, and out of the hands of evildoers, so security and privacy are necessary to Discord's success.
We are looking for a Senior Software Engineer to join our Application Security team and protect Discord’s users where it matters most, their accounts. If you are an engineer with a wealth of experience making the secure way the easy way, a deep sense of curiosity, and an endless desire to improve Discord, read on!
This position is based in our San Francisco office. For this role, the Hiring Manager would like folks to be in the office 1-2 days a week.
岗位职责
• Join an engineering team designing and implementing full-stack, user-facing security solutions that protect hundreds of millions of Discord users.
• Lead full-stack work to strengthen session security and authentication for Discord’s users.
• Improve, operate, and maintain security-critical authentication services, owning their correctness and security.
• Partner with Product teams to drive adoption of stronger authentication and to ship user-facing account security tools.
• Identify and design solutions for emerging threats to user account security.
• Research and implement new security capabilities for the Discord platform, staying current on the authentication and session security landscape.
• Build security controls and tools that emphasize self-service, automation, and performance to help identify and mitigate account security flaws.
任职要求
• You have 5+ years of experience securing production applications.
• You have 3+ years of experience programming in at least one general-purpose programming language (e.g., Python, Go, Java, or Rust).
• You have hands-on experience building and shipping production software, including security features, controls, frameworks, or guardrails.
• You have hands-on experience with authentication and account security, such as WebAuthn, passkeys, FIDO2, MFA, and session management.
• You are comfortable reasoning about the security of complex systems, even if they contain components you aren’t familiar with, and can give engineers clear, sound guidance on secure design and implementation.
• You have experience leading security projects with a cross-functional group.
• You have experience building or hardening client applications, such as desktop or native mobile apps.
• You have experience operating in cloud-based environments (we use Google Cloud, but experience with other platforms is okay too).
Bonus points
• Experience programming in at least one systems programming language (e.g. C, C++).
• Experience developing, operating, and debugging production systems.
• Familiarity with common application vulnerabilities on the platforms Discord ships on (that's all of them).
Candidates must reside in or be willing to relocate to the San Francisco Bay Area (Alameda, Contra Costa, Marin, Napa, San Francisco, San Mateo, Santa Clara, Solano, and Sonoma counties). Relocation assistance may be available.
The US base salary range for this full-time position is $196,000 to $245,000 + equity + benefits. Our salary ranges are determined by role and level. Within the range, individual pay is determined by additional factors, including job-related skills, experience, and relevant education or training. Please note that the compensation details listed in US role postings reflect the base salary only, and do not include equity, or benefits. Why Discord?
Discord plays a uniquely important role in the future of gaming. We're a multiplatform, multigenerational and multiplayer platform that helps people deepen their friendships around games and shared interests, and helps developers build and grow their businesses. We believe games give us a way to have fun with our favorite people, whether listening to music together or grinding in competitive matches for diamond rank. Join us in our mission! Your future is just a click away!
Discord is committed to inclusion and providing reasonable accommodations during the interview process. We want you to feel set up for success, so if you are in need of reasonable accommodations, please let your recruiter know.
Please see our Applicant and Candidate Privacy Policy for details regarding Discord’s collection and usage of personal information relating to the application and recruitment process by clicking HERE.