Engineering Manager, Platform Security

Discord • San Francisco, CA

9d

About The Position

Discord is looking for an Engineering Manager to lead a team of software engineers focused on reducing security risk across Engineering. This team will design and build systems for managing identities and access, shipping code, configuring cloud infrastructure, and operating services. The role involves shaping company-wide security strategy and leading a highly-autonomous team to build and operate identity and access management (IAM) systems, secure software supply chains, develop secure cloud infrastructure baselines, and manage infrastructure vulnerabilities. The manager will also consult on risk assessments, architectural designs, threat models, and code reviews, balancing security with business needs.

Requirements

• 3+ years of experience as people manager, having managed a team of 3+ security software engineers
• Passion for creating diverse and inclusive teams and coaching engineers
• Comfort with writing the roadmap, not just following one
• 3+ years of experience securing systems with millions of users
• Expert reasoning about the security of complex systems, even if they contain unfamiliar components
• Experience building in and securing cloud-based environments (we use GCP, Cloudflare, and AWS)
• Experience writing software in a general-purpose programming language (we use Python, Typescript, and Rust)
• Experience developing with agentic AI, and a good grasp of AI security practices

Nice To Haves

• Understanding of modern authentication and authorization concepts (e.g. RBAC, OAuth, Zero Trust network architectures, mTLS)
• Familiarity with build and CI/CD technologies (e.g. Terraform, Bazel, Buildkite, Spacelift)
• Experience defining and orchestrating containers (e.g. via Kubernetes, Docker, Distroless, OCI) and serverless workloads (e.g. Cloudflare Workers)
• Experience with running and operationalizing security platforms such as Wiz

Responsibilities

• Build and operate identity and access management (IAM) systems for humans and machines that are user-friendly and promote least privilege
• Secure first- and third-party software supply chains, from the dev environment through CI/CD and into production
• Develop and apply best-in-class secure baselines for cloud infrastructure
• Manage infrastructure vulnerabilities while supporting a high-velocity engineering org with hundreds of developers
• Consult on risk assessments, architectural designs, threat models, code reviews, and more—pragmatically balancing security with other business considerations

Benefits

• equity
• benefits

What This Job Offers

• Job Type: Full-time
• Career Level: Manager
• Education Level: No Education Listed