Engineering Manager, Proactive Security - Platform

Remote; San Francisco (CA); Remote; USD 210,000 - 290,000; Full time

Benefits offered by this job

Health benefits

Competitive compensation

Remote work

Job summary

DoorDash is seeking an Engineering Manager, Proactive Security to set and lead the technical direction for platform hardening across AWS and GCP, globally. This US remote role reports to the Director of Security Engineering and focuses on durable, secure controls rather than quick wins.

You will coach senior engineers, own the hardening roadmap for tier-0 services, partner with Core Infrastructure and Compute teams, and drive on-call excellence while removing misconfigurations to keep our

Qualifications

• 12+ years as Security or Infrastructure Platform Engineer at internet-scale.
• 3+ years of technical leadership building global outcomes.
• Hands-on hardening of AWS and/or GCP at scale.
• Experience with Teleport and Vault or similar PAM/secrets platforms.
• No-downtime platform services with on-call discipline.
• Master's degree or equivalent work experience in CS/Security.

Responsibilities

• Set and execute the technical vision for Security Platform team including AWS/GCP hardening.
• Influence engineering standards and improve productivity with modern tooling.
• Own the tier-0 cloud infrastructure and access services hardening roadmap.
• Coach and mentor tech leads, acting as a player-coach on security problems.
• Partner with Core Infrastructure, Compute and Data teams to harden shared platforms.
• Build OE practices with on-call rotations, escalation paths, and reliability.
• Drive continuous hardening to prevent insecure defaults reaching production.
• Enable secure AI tooling adoption from a platform perspective.

Skills

AWS

GCP

Teleport

HashiCorp Vault

On-call practices

Security leadership

Platform engineering

Cloud security

Identity & Access

Education

Master's degree in Computer Science / Security Engineering

Tools

Teleport

HashiCorp Vault

Job description

About the Team

At DoorDash we’re building the industry’s most scalable and reliable delivery network to support our three-sided marketplace of Consumers, Merchants, and Dashers. Security is paramount to the success of our business, and DoorDash Security aspires to be one the world’s most admired security team. We are committed to building the world's most trusted on-demand, logistics engine for delivery! We're expanding our team of great minds to help us secure and maintain a 24x7, no downtime, global infrastructure system that powers DoorDash’s multi-sided marketplace of Consumers, Merchants, and Dashers.

About the Role

Our Security Engineering team is looking for an Engineering Manager, Proactive Security to set and lead the technical direction for platform hardening at DoorDash, Wolt and Deliveroo globally.

You will be a part of our inclusive, collaborative global team responsible for building “paved road” Platform Security controls to harden our compute and storage platforms and provide for a safe, secure and resilient delivery network. This is a US remote position reporting directly to the Director of our Security Engineering team.

You’re excited about this opportunity because you will…

• Set and execute the technical vision for the Security Engineering Platform team, spanning AWS and GCP account/workload hardening, and vital tier-0 services (Access, Identity, Teleport, HashiCorp Vault, Tokenization and others).

• Influence and drive improvements to engineering standards, leverage advancements and LLMs to improve productivity and velocity.

• Own the hardening roadmap for tier-0 cloud infrastructure and access services, backed by rigorous, follow‑the‑sun on‑call. Success is measured in eliminating classes of misconfiguration and exposure at the platform layer, not in shipping code for its own sake.

• Coach and mentor highly skilled tech leads and engineers as a "player‑coach," leaning in at the lowest technical level on cloud hardening, identity, and secrets management problems, and lead the team to build the right durable controls.

• Partner cross‑functionally with Core Infrastructure, Compute, Data, and other engineering platform teams to harden the shared cloud and access substrate that all of DoorDash, Wolt, and Deliveroo build on, and deliver bespoke, in‑house services where vendored platform controls don't fit.

• Build and maintain high Operational Excellence (OE) practices for tier-0 security platforms with rigorous on‑call rotations, clear escalation paths, and minimal downtime, since these systems are load‑bearing for every other team’s ability to ship and operate safely.

• Drive continuous hardening of AWS and GCP environments so insecure defaults are annihilated and prevented before they ever reach production.

• Influence and enable the secure and responsible adoption of AI tooling and agentic workflows from a platform hardening and access‑control perspective.

We’re excited about you because…

• 12+ years of experience as a Security or Infrastructure Platform Engineer at an internet‑scale organization, with 3+ years of demonstrated technical leadership leading teams building outcomes at global scale.

• Deep hands‑on expertise hardening AWS and/or GCP at scale, including account structure, guardrails, workload and network posture, and golden image pipelines.

• Demonstrated technical leadership operating access and secrets infrastructure such as Teleport, HashiCorp Vault, or equivalent PAM/secrets‑management platforms, including the on‑call rigor required to run them as tier‑0 services.

• Track record of building and running highly available, no‑downtime platform services with mature on‑call practices, incident response, and root cause analysis.

• Master's degree in Computer Science, Security Engineering, a related field, or equivalent work experience.

• Demonstrated technical leadership designing scalable security platform controls and processes that meet required regulatory requirements.

• Exceptional problem solving of complex, systemic infrastructure issues that require audacious thinking, rigor, and creativity.

• Exceptional verbal and written communication skills - you will confidently shape and lead the Security Engineering Platform function globally and influence stakeholders across core infrastructure, product, and other engineering teams toward hardened, secure‑by‑default outcomes.

Why You’ll Love Working at DoorDash

• We are leaders - Leadership is not limited to our management team. It’s something everyone at DoorDash embraces and embodies.

• We are doers - We believe the only way to predict the future is to build it. Creating solutions that will lead our company and our industry is what we do -- on every project, every day.

• We are learners - We’re not afraid to dig in and uncover the truth, even if it’s scary or inconvenient. Everyone here is continually learning on the job, no matter if we’ve been in a role for one year or one minute.

• We are customer‑obsessed - Our mission is to grow and empower local economies. We are committed to our customers, merchants, and dashers and believe in connecting people with possibility.

• We are all DoorDash - The magic of DoorDash is our people, together making our inspiring goals attainable and driving us to greater heights.

• We offer exceptional compensation packages and comprehensive health benefits.