D

DoorDash

Runs apps for local food and grocery delivery

Senior Detection Engineer

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-timeRemote in USARemote

About the Job

Requirements

  • Seven or more years of experience in secure coding, alert development, and detection engineering.
  • Direct experience building, maintaining, and operating a detection-as-code pipeline.
  • A proven track record of building automation that measurably improves detection accuracy, velocity, or quality.
  • Demonstrated experience building agents to solve detection problems effectively and efficiently.
  • Extensive knowledge of cloud-based and distributed systems.
  • Experience working with global and cross-functional partners, especially incident response, insider risk, and threat hunting teams.
  • Mastery of SIEM querying using SQL, SPL, or KQL, and programming languages such as Python or Go.
  • Experience translating MITRE ATT&CK, D3FEND, and other industry frameworks into meaningful rationalizations of detection coverage.
  • Experience with verbal and written communication, presentation, and stakeholder management.

Responsibilities

  • Conduct hands-on detection engineering for custom alerting, including implementing risk-based analytics to reduce alert volumes and promote high-fidelity alert content.
  • Integrate external signals such as threat intelligence into alerting pipelines tailored to specific use cases.
  • Develop and maintain agentic tooling to increase detection efficacy and efficiency.
  • Leverage security tooling, logs, and custom telemetry to build detections at scale.
  • Work with structured and unstructured telemetry to produce meaningful security signals.
  • Maintain detection repositories and use case libraries, and conduct routine content optimization.
  • Coordinate with internal and external cross-functional teams on threats targeting DoorDash.
  • Participate in and lead projects that improve the security posture of all DoorDash brands.
  • Create and maintain standards and documentation to improve service consistency.
  • Mentor and develop other engineers within the Cyber Defense organization.
  • Participate in and support the on-call rotation.

Desired Qualifications

  • Experience with Snowflake, Cortex, or Google SecOps.

About the Company

DoorDash

Runs apps for local food and grocery delivery

DoorDash runs apps that let people order restaurant meals, groceries, and other goods from local businesses, which independent couriers called Dashers bring to their doors. In 2019 it overtook Grubhub to become the largest food delivery service in the United States, and it later expanded abroad by buying Finland's Wolt and Britain's Deliveroo. Merchants pay DoorDash a fee on each order and can buy ads in its apps, while customers pay delivery and service fees or join DashPass, a subscription that cuts those fees. Businesses can also hire Dashers through its Drive service to carry orders placed on their own websites. Four Stanford students founded DoorDash in 2013, and it is based in San Francisco, California.

Company size
10,001+
Company stage
IPO
Headquarters
San Francisco, CA
Founded
2013

Recently Posted Jobs

Explore more opportunities at DoorDash

See more jobs