DoorDash is hiring a Senior Security Engineer for its Proactive Security Platform team within Trust & Safety. The team's mission is to enable secure-by-default engineering at DoorDash, focusing on identity, privileged access, and secrets management for critical infrastructure.
Overview
$159,800 – $235,000 / year
remote
full-time
4-7 years of experience (senior level)
Technologies
- DoorDash Access PlatformTeleportHashiCorp VaultOIDCOAuthSAMLAWSGCPAzureGoPythonTerraformCloudFormationCI/CD
Responsibilities
- Design, build, and own secure-by-default platforms and tooling for privileged access, secrets management, and identity across DoorDash's platform, including DoorDash Access Platform, Teleport, and HashiCorp Vault.
- Build paved paths that make secure behavior the easiest path for engineering teams, reducing friction while raising the security bar.
- Threat model and secure tier-0 services, driving architecture reviews and security design decisions for critical infrastructure.
- Drive migration away from long-lived credentials toward short-lived, ephemeral access patterns.
- Partner with engineering teams to embed security controls into developer workflows, CI/CD pipelines, and infrastructure-as-code.
- Define and track security metrics that demonstrate the impact of platform investments on risk reduction.
- Mentor other security engineers and contribute to the team's technical direction and engineering excellence.
Qualifications
- 5+ years of experience in security engineering, with a focus on platform security, identity and access management, or infrastructure security.
- Deep expertise in identity and access management, including authentication protocols (OIDC, OAuth, SAML), authorization models, and privileged access management.
- Hands-on experience with secrets management platforms such as HashiCorp Vault, AWS Secrets Manager, or similar, and with secure credential lifecycle management.
- Experience building and operating security platforms or tooling in a cloud-native environment (AWS, GCP, or Azure).
- Strong software engineering skills in Go, Python, or similar languages, with experience building production services and tooling.
- Experience with infrastructure-as-code (Terraform, CloudFormation) and CI/CD pipelines.
- Strong understanding of threat modeling, security architecture, and secure system design.
- Experience driving cross-functional security initiatives and influencing engineering teams without direct authority.
- Excellent communication skills and ability to articulate complex security concepts to both technical and non-technical audiences.
- Experience with on-call rotations and incident response for security services.
Benefits
- Competitive salary, equity, and benefits package.
- Equity in the form of restricted stock units (RSUs).
- Remote-friendly company with flexible work arrangements.
- Commitment to growing and empowering a more inclusive community.
- Team values transparency, trust, and ownership.