Senior Security Software Engineer, Detection and Response
About The Position
Discord is used by over 200 million people every month for many different reasons, but there’s one thing that nearly everyone does on our platform: play video games. Over 90% of our users play games, spending a combined 1.5 billion hours playing thousands of unique titles on Discord each month. Discord plays a uniquely important role in the future of gaming. We are focused on making it easier and more fun for people to talk and hang out before, during, and after playing games. Discord is about giving people the power to create space to find belonging in their lives. Trusted by millions of people to keep their communications secure, private, and out of the hands of evildoers, security and privacy are necessary to Discord's success. We're looking for a Senior Detection and Response Engineer to join our Detection & Response Team (DART). We're an engineering-focused team that build scalable detection systems, automate response workflows, and develop tooling that lets us stay ahead of threats rather than just react to them. If you're an engineer who's passionate about security and loves turning investigative insights into durable, automated solutions, read on!
Requirements
- 3+ years in Detection and Response as a senior IC, with demonstrated experience building (not just operating) security tooling
- 3+ years programming in Python or similar - you’ll write production code, not just scripts
- Strong experience with cloud security monitoring and investigations
- Experience in building detections from large datasets and automating incident response processes
- Deep knowledge of attacker TTPs, malware analysis, and threat hunting methodologies
- Experience with container orchestration (Kubernetes) and/or serverless technologies (Cloud Functions, Workers)
- Familiarity with distributed systems observability and log analysis at scale
Nice To Haves
- Hands-on experience with Panther SIEM
- Background in BeyondCorp / Zero-trust environments
- Experience with Cloudflare security tooling
- Contributions to open-source security projects
Responsibilities
- Build detection systems at scale.
- Design and implement detections across cloud infrastructure, applications, and enterprise systems using large-scale log analysis and behavioral signals.
- Engineer response automation.
- Develop tooling and workflows that reduce mean time to detection and respondse - turning manual playbooks into code.
- Lead incident response.
- Serve as a subject matter expert during security incidents, driving investigations from initial triage through root cause analysis and remediation.
- Architect observability.
- Partner with internal teams to identify new telemetry sources, improve log coverage, and ensure we have visibility where it matters.
- Hunt proactively.
- Use threat intelligence and behavioral analysis to find malicious activity before alerts fire - then turn those hunts into production detections.
- Ship production code.
- Contribute to a fast-moving codebase, deploying detection logic and automation tooling to production environments.
- Mentor and elevate.
- Partner with our embedded response team - coaching on investigative techniques, detection engineering principles, and incident handling.
- Help build a culture of continuous learning and technical excellence.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
Number of Employees
501-1,000 employees
