Senior Security Engineer

Duolingo

New York, US

On-site

Job Description

<p>Our mission at Duolingo is to develop the best education in the world and make it universally available. It’s a big mission, and that’s where you come in!</p>

<p>At Duolingo, you’ll join a team that cares about finding <a href="https://blog.duolingo.com/tag/engineering/?utm_source=greenhouse.com&amp;utm_medium=referral&amp;utm_campaign=engblog_gh_091224">innovative solutions to complex technical problems</a>, running countless experiments (300+ at a time!) with our massive user base to make data-driven decisions, and educating our users and employees alike. You’ll have limitless learning opportunities, mentorship and collaboration with world-class minds, and a variety of projects with large scopes — while doing work that’s both fun and meaningful.&nbsp;</p>

<p>Join our life-changing mission to develop education for our half a billion (and growing!) learners around the world.</p>

<hr>

<h2><strong>About the role</strong></h2>

<p>Join Duolingo as a Security Engineer and play a pivotal role in safeguarding our systems, employees, learner data, and services across our rapidly growing language learning platform. With over 800 employees and 21 million daily active users, your expertise will be critical in maintaining the highest security standards while continuously enhancing our infrastructure security and ensuring compliance.<br><br></p>

<div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="cgp5g-0-0"><span data-offset-key="cgp5g-0-0"><span data-text="true">Design and develop scalable monitoring and response systems for security alerts to proactively mitigate risks</span></span></div>

</li>

<div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="d78vg-0-0"><span id="popover-trigger-:r19:" class="chakra-text css-bcri66"><span data-offset-key="d78vg-0-0"><span data-text="true">Continuously evaluate Duolingo's security posture, anticipating future threats and devising appropriate countermeasures</span></span></span></div>

</li>

<div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="7ro7a-0-0"><span data-offset-key="7ro7a-0-0"><span data-text="true">Collaborate with development teams to conduct threat modeling, identify risks, and provide guidance on mitigations</span></span></div>

</li>

<div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="f66bu-0-0"><span data-offset-key="f66bu-0-0"><span data-text="true">Be a partner to our security champions, organizing and growing the program across Duolingo to ensure the </span></span><span id="popover-trigger-:r1b:" class="chakra-text css-1j6t0d7"><span data-offset-key="f66bu-1-0"><span data-text="true">efficient</span></span></span><span data-offset-key="f66bu-2-0"><span data-text="true"> distribution of security knowledge</span></span></div>

</li>

<div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="to95-0-0"><span data-offset-key="to95-0-0"><span data-text="true">Implement dependency checks for open-source software within applications</span></span></div>

</li>

<div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="3lk6l-0-0"><span data-offset-key="3lk6l-0-0"><span data-text="true">Participate in regular product security tabletops with organizational partners</span></span></div>

</li>

<div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="5k9og-0-0"><span data-offset-key="5k9og-0-0"><span data-text="true">Work on deploying early alerting systems throughout our environment and the responsive automations that trigger when they alert</span></span></div>

</li>

<div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="b18dk-0-0"><span data-offset-key="b18dk-0-0"><span data-text="true">Develop a continuous verification and testing system for security controls and critical features</span></span></div>

</li>

<div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="a2pvq-0-0"><span data-offset-key="a2pvq-0-0"><span data-text="true">Work with our partners in finance to ensure we maintain compliance with our regulatory obligations</span></span></div>

</li>

<div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="9e48d-0-0"><span data-offset-key="9e48d-0-0"><span data-text="true">Collaborate with IT to improve the security of our offboarding processes by introducing automation and well documented procedures<br><br></span></span></div>

</li>

</ul>

<div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="5gaas-0-0"><span data-offset-key="5gaas-0-0"><span data-text="true">Experience deploying, managing, and troubleshooting security scanning tools in the CI/CD pipeline</span></span></div>

</li>

<div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="3cctl-0-0"><span id="popover-trigger-:r1d:" class="chakra-text css-1h4n5cs"><span data-offset-key="3cctl-0-0"><span data-text="true">Familiarity</span></span></span><span data-offset-key="3cctl-1-0"><span data-text="true"> with Linux system administration, automation, and Python programming</span></span></div>

</li>

<div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="bk337-0-0"><span data-offset-key="bk337-0-0"><span data-text="true">A desire to learn more about security and develop the foundational building blocks of the program</span></span></div>

</li>

<div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="9qr90-0-0"><span id="popover-trigger-:r1f:" class="chakra-text css-bcri66"><span data-offset-key="9qr90-0-0"><span data-text="true">Strong collaboration, </span></span></span><span id="popover-trigger-:r1h:" class="chakra-text css-8zk7oi"><span data-offset-key="9qr90-1-0"><span data-text="true">emotional</span></span></span><span id="popover-trigger-:r1j:" class="chakra-text css-bcri66"><span data-offset-key="9qr90-2-0"><span data-text="true"> intelligence, and communication skills</span></span></span></div>

</li>

<div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="ast2a-0-0"><span data-offset-key="ast2a-0-0"><span data-text="true">A Bachelor’s degree in Computer Science or a related technical field</span></span></div>

</li>

<div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="2hm7d-0-0"><span data-offset-key="2hm7d-0-0"><span data-text="true">Proven experience developing and maintaining microservices</span></span></div>

</li>

<div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="4p6od-0-0"><span data-offset-key="4p6od-0-0"><span data-text="true">Experience in product, application, or cloud security</span></span></div>

</li>

<div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="3bidf-0-0"><span data-offset-key="3bidf-0-0"><span data-text="true">Willingness to work in both backend engineering and operational engineering dependent on the needs of the organization</span></span></div>

</li>

<div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="h66d-0-0"><span data-offset-key="h66d-0-0"><span data-text="true">Ability to relocate to New York, NY<br><br></span></span></div>

</li>

</ul>

<h4><strong><img style="max-width: 100%;" src="https://careers.duolingo.com/d26c1c52534fdf7f9587.svg" alt="icon-star-16px" width="17" data-is360="0"> &nbsp;Exceptional candidates will have...</strong></h4>

<div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="5qqu4-0-0"><span id="popover-trigger-:r1n:" class="chakra-text css-1h4n5cs"><span data-offset-key="5qqu4-0-0"><span data-text="true">Familiarity</span></span></span><span data-offset-key="5qqu4-1-0"><span data-text="true"> with containerization runtimes (Docker, rkt)</span></span></div>

</li>

<div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="eamtd-0-0"><span data-offset-key="eamtd-0-0"><span data-text="true">Experience securing a large infrastructure on AWS</span></span></div>

</li>

<div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="bvamm-0-0"><span data-offset-key="bvamm-0-0"><span data-text="true">Threat modeling experience across various architectures and understand how to align those with business goals</span></span></div>

</li>

<div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="17bmu-0-0"><span data-offset-key="17bmu-0-0"><span data-text="true">Demonstrable experience in designing and managing multi-account cloud environments</span></span></div>

</li>

<div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="enku8-0-0"><span id="popover-trigger-:r1p:" class="chakra-text css-bcri66"><span data-offset-key="enku8-0-0"><span data-text="true">Experience communicating sophisticated technical requirements to audiences of variable technical sophistication</span></span></span></div>

</li>

<div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="12lsb-0-0"><span data-offset-key="12lsb-0-0"><span data-text="true">Experience working in Terraform, developing modules, and creating secure by default configurations</span></span></div>

</li>

<div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="d72vu-0-0"><span id="popover-trigger-:r1r:" class="chakra-text css-1h4n5cs"><span data-offset-key="d72vu-0-0"><span data-text="true">Familiarity</span></span></span><span data-offset-key="d72vu-1-0"><span data-text="true"> with security scanning tools such as SemGrep, Nuclei, Trufflehog, and Checkov</span></span></div>

</li>

</ul>

<hr><div class="content-pay-transpa...(Truncated)

Skills & Requirements

Technical Skills

SecurityMonitoringResponse SystemsSecurity Scanning ToolsInfrastructure Security

Employment Type

FULL TIME

Level

senior

Posted

1/7/2026

Apply Now

You will be redirected to Duolingo's application portal.