Senior Enterprise Security Engineer

About Discord

Discord is used by over 200 million people every month for many different reasons, but there’s one thing that nearly everyone does on our platform: play video games. Over 90% of our users play games, spending a combined 1.5 billion hours playing thousands of unique titles on Discord each month. Discord plays a uniquely important role in the future of gaming. We are focused on making it easier and more fun for people to talk and hang out before, during, and after playing games.

We are looking for an experienced Senior Enterprise Security Engineer reporting to the Engineering Manager of Enterprise Security. In this role, you will implement and maintain Discord’s enterprise environment, with a sharp focus on security and privacy. Are you passionate about balancing strong security with seamless operations? We’d love to meet you. We’re looking for someone who brings strong technical skills and genuinely cares about protecting data and keeping systems secure. If you love solving challenging security problems, get energized by learning new things, and want to help make Discord even better, come join our security team on this journey.

What You'll Be Doing

• Design and implement security measures to protect company data from unauthorized access, disclosure, and misuse.
• Partner closely with the Detection & Response team to maintain full visibility into enterprise access, networks, and devices.
• Deploy and manage security tools across Discord's corporate infrastructure.
• Establish security standards that provide strong protection while enabling smooth workflows.
• Develop and deliver security awareness training for employees.
• Shape and enforce Discord's IT and security policies.
• Build secure, sustainable environments using modern principles like "secure by design" and “zero-trust” network architecture, without relying on traditional VPN setups.
• Foster a security-conscious culture by guiding employees on data protection best practices.
• Partner cross-functionally with IT, Engineering, Workplace, and other teams to achieve security objectives.

What You Should Have

• 3+ years of experience in an Enterprise Security role as a senior individual contributor or lead.
• 3+ years of experience programming in at least one general purpose programming language (e.g., Python, Go, Rust).
• Experience securing, monitoring, and managing Identity and Access Management systems (we use Okta, Kolide, Teleport, and Cloudflare Access).
• Deep understanding of data security in enterprise environments.
• Experience working in “zero-trust” network architecture environments.
• Experience deploying and managing Mobile Device Management, Endpoint Detection and Response, and device trust tooling.
• Knowledge and practical application of IT security best practices.
• A great sense of empathy.

Bonus Points

• Experience working with SIEMs (we use Panther)
• Hands-on experience with Google Cloud.
• Hands-on experience with Cloudflare.
• Hands-on experience managing a primarily macOS and ChromeOS environment with a smaller Windows footprint. We used Jamf & Intune for our endpoint management and Crowdstrike & Jamf for endpoint detections and response (EDR).

Key skills/competency

• Senior Enterprise Security Engineer
• Enterprise Security
• Security Engineering
• Identity and Access Management
• Zero-Trust Architecture
• Data Security
• Endpoint Detection and Response (EDR)
• Security Awareness Training
• IT Security Policies
• Python or Go or Rust