Staff Security Engineer, Security Enablement

DoorDash Mexico; United States; Remoto; USD 194.000 - 285.000; Tempo pieno

Vantaggi offerti da questo lavoro

401(k) match

Parental leave 16 weeks

Wellness benefits

Commuter benefits match

Paid time off

Medical benefits

Dental benefits

Vision benefits

Disability insurance

Life insurance

Descrizione del lavoro

DoorDash is hiring a Staff Security Engineer to design and deliver strategic security services across multi-domain environments. You will own the technical plan, partner with providers, define delivery sequence, and lead programs with cross-functional teams.

You will drive security outcomes at scale, focus on architectural decisions, and own the cloud footprint and ID/access controls while mentoring engineers and shaping security strategy.

Competenze

• 6+ years in security or infrastructure engineering.
• Bachelor of Science in Computer Science, Security Engineering, Information Systems, or equivalent years of experience.
• Expertise with cloud-based services and infrastructure (AWS, Google Cloud, etc.).
• Hands-on depth with enterprise access control and video platforms (Lenel, Genetec, Milestone, or peers) and the APIs and integrations around them.

Mansioni

• Own the design of our physical security systems integration layer — such as access control (PACS) and video management (VMS) platforms, the APIs they expose, and the connectors that carry their data into our systems of record.
• Own end-to-end design and delivery of multi-domain security services spanning physical security systems, hardware provisioning and site readiness, cloud and network infrastructure, identity and access management, key management, and the reporting/observability layers on top.
• Partner with our software engineers from design through implementation, ensuring the right security outcomes are achieved, review architecture, and support services in production for operational excellence.
• Own the cloud footprint of the security stack, including AWS services and related identity and network boundaries.
• Execute complex and ambiguous security initiatives through detailed working-backwards plans with clear owners and decisions.
• Surface and manage delivery risks, maintain a risk register with mitigations and dates.
• Unblock cross-team friction through collaboration, escalating with recommendations when needed.
• Be the single source of truth on status for senior leaders and manage stakeholder expectations across teams.
• Drive technical decisions to closure, document trade-offs, and advocate for secure, scalable tooling.
• Contribute to vision, strategy, and metrics; mentor engineers and program managers.

Conoscenze

Security engineering

Cloud infrastructure

Identity and Access Management

Security architecture

Formazione

Bachelor of Science in Computer Science, Security Engineering, Information Systems, or equivalent

Descrizione del lavoro

About the Team

Global Safety and Security (GSS) protects our people, our sites, and the physical and logical systems that keep the business running. Our security and protection programs are never single-team efforts: one rollout can touch physical security operations, customer experiences, site readiness, hardware provisioning, networking, cloud infrastructure, identity, and the data platforms above them - spanning many countries, on timelines tied to leases, permits, and vendors.

We are hiring a Staff Security Engineer to help design and deliver strategic and durable security services. You own the technical and architectural plan, strategic partner engagement with technology providers, the delivery sequence, the dependencies, and the program status leadership relies on. You are accountable for outcomes influencing teams that you don’t manage. You will collaborate with software engineers, third-party providers, physical security operations, project managers running site readiness and provisioning, and networking and cloud infrastructure partners, and you will keep managers, directors, and senior leaders informed.

Security Enablement Engineering delivers security paved paths and capabilities that address systemic security issues through well-designed customer experiences, easy-to-adopt and robust, well-architected security solutions, systematically reducing organizational risk.

You’re excited about this opportunity because you will…

• Own the design of our physical security systems integration layer — such as access control (PACS) and video management (VMS) platforms, the APIs they expose, and the connectors that carry their data into our systems of record.


• Own end-to-end design and delivery of multi-domain security services spanning physical security systems, hardware provisioning and site readiness, cloud and network infrastructure, identity and access management, key management, and the reporting/observability layers on top. You’ll bring expertise deploying security solutions at scale across many of these domains.


• Partner with our software engineers from design through implementation, ensuring the right security outcomes are achieved. Propose and review architecture, design highly resilient, secure and scalable solutions, deliver proactive feedback to drive continuous improvement, hold the interface contracts, and support services in production ensuring operational excellence.


• Own the cloud footprint of the security stack. The AWS services that host and scale these systems, the identity and network boundaries around them.


• Own execution of complex and ambiguous security initiatives through detailed working-backwards plans. Start from the outcome and the date, then derive the dependency chain, critical path, owners, and the decisions that must land before each gate.


• Look around corners. Surface and manage delivery risks before they escalte. Keep a risk register that’s well managed with an owner, a mitigation, and a delivery date.


• Unblock, and elevate when unblocking requires it. Resolve most cross-team friction through direct collaboration. Escalate early, with a recommendation, and tradeoffs to leadership. Escalation is a deliberate tool, not a last resort.


• Be the single source of truth on status. Concise written updates for senior leaders: what is on track, what is at risk, what changed, what decision we need. Manage stakeholder expectations from leadership to individual teams, apply strong problem solving and negotiation skills, and earn the trust of partners and teams.


• Drive technical decisions to closure and operate through ambiguity. Frame the trade-offs, make recommendations on tooling (build/buy) and document what was decided and why.


• Contribute to the vision, strategy, technical direction, and success metrics. Mentor engineers and program managers across GSS and partner teams. Review their plans, coach them on written status and risk framing, and help continually raise the operational and security bar. Develop shared goals with security partners, and identify solutions that optimize or automate manual, inefficient processes.

We’re excited about you because…

• You have led multi-team, multi-quarter technical programs and owned the outcome across organizational boundaries.


• You have a deep understanding of at least three security engineering domains and broad understanding across many: Identity and Access Management, Physical Security Systems, Security Operations, Detection and Response, DevSecOps, Security Architecture and Engineering, and Network Security.


• You can read a network diagram, reason about a cloud deployment topology, understand hardware and firmware lifecycles, and hold a credible conversation with an infrastructure engineer about their constraints.


• Global-scale software or cloud rollouts, including vendor-supplied platforms deployed across many sites and regions, with the integration and migration work that implies.


• Exceptional written and verbal communication — plans and status a director can act on and a senior engineer will not dismiss, and the range to convey security priorities and concepts to experts and non-experts alike.


• Influence without authority, agility in re-planning when reality changes rather than defending the original plan, and comfort with physical-world constraints: sites, hardware, permits, and installers do not behave like pure software programs.


• You have raised the bar for others without managing them — mentoring engineers and program managers, and improving plans and status through proactive feedback.


• You have strong ownership, urgency, autonomy and drive. You are willing to roll up your sleeves and dive into the details to understand and drive your programs, and you focus on progress, not perfection.

Qualifications

Required

• 6+ years in security or infrastructure engineering, including 4+ leading multi-team technical programs.


• Bachelor of Science in Computer Science, Security Engineering, Information Systems, or equivalent years of experience in a related technical field


• Expertise with cloud-based services and infrastructure (AWS, Google Cloud, etc.)


• Hands-on depth with enterprise access control and video platforms (Lenel, Genetec, Milestone, or peers) and the APIs and integrations around them.


• Project planning and execution skills that include JIRA experience, reviewing technical design documents, security controls, estimating, and scheduling.

Preferred

• Physical security, access control, or safety-technology programs; a security or trust-and-safety organization; standing up program practice where none existed.


• Proficiency in SQL data analysis, Python coding, and other automation tooling.


• Experience with building Agentic workflows.

Compensation

The successful candidate’s starting pay will fall within the pay range listed below and is determined based on job-related factors including, but not limited to, skills, experience, qualifications, work location, and market conditions. Base salary is localized according to an employee’s work location. Ranges are market-dependent and may be modified in the future.

In addition to base salary, the compensation for this role includes opportunities for equity grants. Talk to your recruiter for more information.

DoorDash cares about you and your overall well-being. That’s why we offer a comprehensive benefits package to all regular employees, which includes a 401(k) plan with employer matching, 16 weeks of paid parental leave, wellness benefits, commuter benefits match, paid time off and paid sick leave in compliance with applicable laws (e.g. Colorado Healthy Families and Workplaces Act). DoorDash also offers medical, dental, and vision benefits, 11 paid holidays, disability and basic life insurance, family-forming assistance, and a mental health program, among others.

To learn more about our benefits, visit our careers page here.

See below for paid time off details:

• For salaried roles: flexible paid time off/vacation, plus 80 hours of paid sick time per year.


• For hourly roles: vacation accrued at about 1 hour for every 25.97 hours worked (e.g. about 6.7 hours/month if working 40 hours/week; about 3.4 hours/month if working 20 hours/week), and paid sick time accrued at 1 hour for every 30 hours worked (e.g. about 5.8 hours/month if working 40 hours/week; about 2.9 hours/month if working 20 hours/week).

The national base pay range for this position within the United States, including Illinois and Colorado.

$193,800-285,000 USD

About DoorDash

At DoorDash, our mission to empower local economies shapes how our team members move quickly, learn, and reiterate in order to make impactful decisions that display empathy for our range of users—from Dashers to merchant partners to consumers. We are a technology and logistics company that started by enabling door-to-door delivery, and we are looking for team members who can help us go from a company that is known as the place you order food to a company that people turn to for any and all goods.

DoorDash is growing rapidly and changing constantly, which gives our team members the opportunity to share their unique perspectives, solve new challenges, and own their careers. We’re committed to supporting employees’ happiness, healthiness, and overall well-being by providing comprehensive benefits and perks including premium healthcare, wellness expense reimbursement, paid parental leave and more.

Our Commitment to Diversity and Inclusion

We’re committed to growing and empowering a more inclusive community within our company, industry, and cities. That’s why we hire and cultivate diverse teams of people from all backgrounds, experiences, and perspectives. We believe that true innovation happens when everyone has room at the table and the tools, resources, and opportunity to excel.

Statement of Non-Discrimination: In keeping with our beliefs and goals, no employee or applicant will face discrimination or harassment based on: race, color, ancestry, national origin, religion, age, gender, marital/domestic partner status, sexual orientation, gender identity or expression, disability status, or veteran status. Above and beyond discrimination and harassment based on “protected categories,” we also strive to prevent other subtler forms of inappropriate behavior (i.e., stereotyping) from ever gaining a foothold in our office. Whether blatant or hidden, barriers to success have no place at DoorDash. We value a diverse workforce – people who identify as women, non-binary or gender non-conforming, LGBTQIA+, American Indian or Native Alaskan, Black or African American, Hispanic or Latinx, Native Hawaiian or Other Pacific Islander, differently-abled, caretakers and parents, and veterans are strongly encouraged to apply. Thank you to the Level Playing Field Institute for this statement of non-discrimination.

Pursuant to the San Francisco Fair Chance Ordinance, Los Angeles Fair Chance Initiative for Hiring Ordinance, and any other state or local hiring regulations, we will consider for employment any qualified applicant, including those with arrest and conviction records, in a manner consistent with the applicable regulation.

If you need any accommodations, please inform your recruiting contact upon initial connection.

Notice to Applicants for Jobs Located in NYC or Remote Jobs Associated With Office in NYC Only

We used Covey as part of our hiring and/or promotional process for jobs in NYC and certain features may qualify it as an AEDT in NYC. As part of the hiring and/or promotion process, we provided Covey with job requirements and candidate submitted applications. We began using Covey Scout for Inbound from August 21, 2023, through December 21, 2023. We resumed using Covey Scout for Inbound again on June 29, 2024, and ceased using Covey Scout for Inbound on April 30, 2026.