Senior Security Engineer, Enterprise Security

We are looking for an experienced Senior Enterprise Security Engineer reporting to the Engineering Manager of Enterprise Security. In this role, you will implement and maintain Discord’s enterprise environment, with a sharp focus on security and privacy. Are you passionate about balancing strong security with seamless operations? We’d love to meet you. We’re looking for someone who brings strong technical skills and genuinely cares about protecting data and keeping systems secure. If you love solving challenging security problems, get energized by learning new things, and want to help make Discord even better, come join our security team on this journey.

What You'll Be Doing

• Design and implement security measures to protect company data from unauthorized access, disclosure, and misuse.
• Partner closely with the Detection & Response team to maintain full visibility into enterprise access, networks, and devices.
• Deploy and manage security tools across Discord's corporate infrastructure.
• Establish security standards that provide strong protection while enabling smooth workflows.
• Develop and deliver security awareness training for employees.
• Shape and enforce Discord's IT and security policies.
• Build secure, sustainable environments using modern principles like "secure by design" and “zero-trust” network architecture, without relying on traditional VPN setups.
• Foster a security-conscious culture by guiding employees on data protection best practices.
• Partner cross-functionally with IT, Engineering, Workplace, and other teams to achieve security objectives

What you should have

• 3+ years of experience in an Enterprise Security role as a senior individual contributor or lead.
• 3+ years of experience programming in at least one general purpose programming language (e.g., Python, Go, Rust).
• Experience securing, monitoring, and managing Identity and Access Management systems (we use Okta, Kolide, Teleport, and Cloudflare Access).
• Deep understanding of data security in enterprise environments.
• Experience working in “zero-trust” network architecture environments.
• Experience deploying and managing Mobile Device Management, Endpoint Detection and Response, and device trust tooling.
• Knowledge and practical application of IT security best practices.
• A great sense of empathy.

Bonus Points

• Experience working with SIEMs (we use Panther)
• Hands on experience with Google Cloud.
• Hands on experience with Cloudflare.
• Hands-on experience managing a primarily macOS and ChromeOS environment with a smaller Windows footprint. We used Jamf & Intune for our endpoint management and Crowdstrike & Jamf for endpoint detections and response (EDR).