Staff Security Engineer

📋 Description

• Set technical direction for security across Duolingo's applications, cloud infrastructure, and
• Lead complex, multi-team security initiatives from problem definition and design through
• Design and build scalable security services, controls, and automation that prevent, detect, and
• Partner with engineering teams to threat model systems, review architecture and code, prioritize
• Strengthen security across the software-development lifecycle, including secrets management
• Evaluate Duolingo's security posture, use evidence to identify the highest-impact investments, and

🎯 Requirements

• A track record of leading large, complex security engineering initiatives across multiple teams
• Deep experience in at least two of the following areas: application security, product security
• Strong software-engineering skills in one or more programming or scripting languages and experience
• Experience securing cloud environments and designing controls for identity, networking, data
• Experience applying threat modeling, architecture review, code review, and vulnerability analysis
• Experience using infrastructure as code and CI/CD to deliver repeatable, testable, and secure

🎁 Benefits

• Equity compensation in addition to base salary
• Comprehensive benefits package (see careers.duolingo.com/#benefits)