Staff Security Engineer
Core
Shape and deliver Duolingo's security strategy, safeguarding learners, employees, systems, and services by identifying high-impact problems and leading complex initiatives from proposal through production.
Role type
Staff Security Engineer
Builds
Scalable security services, controls, and automation that prevent, detect, and remediate risks with minimal manual effort.
Domain
Cloud security, application security, and infrastructure security for a global education platform.
Required skills
Security strategy definition, threat modeling, architecture review, vulnerability management, secrets management, CI/CD security, incident response, infrastructure as code, secure-by-default pattern design, risk prioritization, technical mentorship.
Preferred skills
Building security programs from early stage, securing multi-account/multi-cloud environments (AWS/GCP), creating security platforms/paved-road patterns, leading high-severity incident response, applying AI-assisted tooling to security analysis.
Technologies
AWS, GCP, Infrastructure as Code, CI/CD pipelines, Cloud environments.
Responsibilities
Set technical direction for security across applications and cloud infrastructure; Lead complex, multi-team security initiatives from design to implementation; Design and build scalable security services and automation; Partner with engineering teams to threat model systems and review architecture/code; Strengthen security across the software-development lifecycle; Evaluate security posture and define measurable outcomes; Lead technical response to significant security incidents; Establish reusable secure-by-default patterns for cloud and application infrastructure; Mentor engineers and raise the technical bar across Engineering.
Seniority
Staff, hands-on IC with strategic scope
