Engineering Manager, Proactive Security Platform

DoorDash, Inc.; San Francisco, Northern (CA, KY); Hybrid; USD 150,000 - 260,000; Full time

Job summary

DoorDash, Inc. is seeking an Engineering Manager, Proactive Security to set and lead the technical direction for platform hardening across AWS and GCP globally. This US-remote role reports to the Director of Security Engineering and focuses on delivering durable, secure infrastructure across three platforms.

You will coach senior engineers, drive tier-0 security controls, and partner with other platform teams to ensure hardened, secure-by-default outcomes and continuous on-call excellence.

Qualifications

• 12+ years in Security or Infrastructure Platform Engineering at internet-scale.
• 3+ years of technical leadership building global security outcomes.
• Hands-on hardening of AWS and/or GCP at scale with guardrails.
• Experience with PAM/secrets management platforms and on-call rigor.
• Strong communication and cross-functional leadership.

Responsibilities

• Set and execute the technical vision for the Security Engineering Platform.
• Own hardening roadmap for tier-0 cloud infrastructure and access services.
• Coach tech leads and engineers as a player-coach on cloud hardening and secrets.
• Partner with Core Infrastructure and Compute to harden shared cloud substrates.
• Maintain high OE practices with on-call rotations and minimal downtime.

Skills

Technical leadership

AWS & GCP security

Cloud hardening

Access & secrets management

On-call discipline

Team coaching

Threat modeling

Platform security

Education

Master's degree in CS/Security or related

Tools

Teleport

HashiCorp Vault

Job description

DoorDash, Inc. is seeking an Engineering Manager, Proactive Security to set and lead the technical direction for platform hardening across AWS and GCP globally. This US-remote role reports to the Director of Security Engineering and focuses on delivering durable, secure infrastructure across three platforms.

You will coach senior engineers, drive tier-0 security controls, and partner with other platform teams to ensure hardened, secure-by-default outcomes and continuous on-call excellence.