Senior Detection Engineer - Threat Analytics & Automation

DoorDash High Volume; San Francisco (CA); On-site; USD 160,000 - 235,000; Full time

Benefits offered by this job

Premium healthcare

Paid parental leave

Paid time off

Job summary

DoorDash is seeking a Senior Detection Engineer to join Global Cyber Defense. You will lead hands-on detection engineering across cloud, endpoints, and the marketplace, collaborating with incident response, insider risk, and threat intel teams to craft high‑fidelity detections.

You will influence the detection pipeline, build agentic tooling, and contribute to detection content at scale while participating in on-call rotations.

Qualifications

• 7+ years of experience in secure coding, alert development, and detection engineering.
• Direct experience building, maintaining, and operating a detection-as-code pipeline.
• Proven automation that measurably improved detection accuracy, velocity, or quality.
• Experience building agents to solve detection problems efficiently.
• Extensive knowledge of cloud-based and distributed systems.
• Experience with incident response, insider risk, and threat hunting teams.
• Mastery of SIEM querying (SQL, SPL, KQL) and programming languages (Python, Go).
• Experience translating MITRE ATT&CK, D3FEND, and other frameworks into detection coverage.
• Excellent verbal and written communication, presentation, and stakeholder management.
• Experience with Snowflake, Cortex, Google SecOps is preferred.

Responsibilities

• Conduct hands-on detection engineering for custom alerting and risk-based analytics.
• Integrate external signals such as threat intelligence into alerting pipelines for specific use cases.
• Develop and maintain agentic tooling to increase detection efficacy and efficiency.
• Leverage security tooling, logs, and custom telemetry to build detections at scale.
• Work with structured and unstructured telemetry to produce meaningful security signals.
• Maintain detection repositories and use case libraries; perform content optimization.
• Coordinate with cross-functional teams on threats targeting DoorDash.
• Lead projects that improve the security posture of DoorDash brands.
• Create and maintain standards and documentation to improve service consistency.
• Mentor and uplevel other engineers within the Cyber Defense organization.
• Participate in and support our on-call rotation.

Skills

Detection engineering

Secure coding

SIEM queries (SQL, SPL, KQL)

Python

Go

Threat hunting

Incident response

Cloud & distributed systems

On-call rotation

Tools

Snowflake

Cortex

Google SecOps

Job description

DoorDash is seeking a Senior Detection Engineer to join Global Cyber Defense. You will lead hands-on detection engineering across cloud, endpoints, and the marketplace, collaborating with incident response, insider risk, and threat intel teams to craft high‑fidelity detections.

You will influence the detection pipeline, build agentic tooling, and contribute to detection content at scale while participating in on-call rotations.