Engineering Manager, Proactive Security - Platform

📋 Job Overview

At DoorDash we’re building the industry’s most scalable and reliable delivery network to support our three-sided marketplace of Consumers, Merchants, and Dashers. Security is paramount to the success of our business, and DoorDash Security aspires to be one the world’s most admired security team. We are committed to building the world's most trusted on-demand, logistics engine for delivery! We're expanding our team of great minds to help us secure and maintain a 24x7, no downtime, global infrastructure system that powers DoorDash’s multi-sided marketplace of Consumers, Merchants, and Dashers.

🏢 About DoorDash

At DoorDash, our mission to empower local economies shapes how our team members move quickly, learn, and reiterate in order to make impactful decisions that display empathy for our range of users—from Dashers to merchant partners to consumers. We are a technology and logistics company that started by enabling door-to-door delivery, and we are looking for team members who can help us go from a company that is known as the place you order food to a company that people turn to for any and all goods.

DoorDash is growing rapidly and changing constantly, which gives our team members the opportunity to share their unique perspectives, solve new challenges, and own their careers. We're committed to supporting employees’ happiness, healthiness, and overall well-being by providing comprehensive benefits and perks including premium healthcare, wellness expense reimbursement, paid parental leave and more.

🎯 The Role

Our Security Engineering team is looking for an Engineering Manager, Proactive Security to set and lead the technical direction for platform hardening at DoorDash, Wolt and Deliveroo globally.

You will be a part of our inclusive, collaborative global team responsible for building “paved road” Platform Security controls to harden our compute and storage platforms and provide for a safe, secure and resilient delivery network. This is a US remote position reporting directly to the Director of our Security Engineering team. 

✅ Key Responsibilities

• Set and execute the technical vision for the Security Engineering Platform team, spanning AWS and GCP account/workload hardening, and vital tier-0 services (Access, Identity, Teleport, HashiCorp Vault, Tokenization and others).
• Influence and drive improvements to engineering standards, leverage advancements and LLMs to improve productivity and velocity. 
• Own the hardening roadmap for tier-0 cloud infrastructure and access services, backed by rigorous, follow-the-sun on-call. Success is measured in eliminating classes of misconfiguration and exposure at the platform layer, not in shipping code for its own sake.
• Coach and mentor highly skilled tech leads and engineers as a \"player-coach,\" leaning in at the lowest technical level on cloud hardening, identity, and secrets management problems, and lead the team to build the right durable controls.
• Partner cross-functionally with Core Infrastructure, Compute, Data, and other engineering platform teams to harden the shared cloud and access substrate that all of DoorDash, Wolt, and Deliveroo build on, and  deliver bespoke, in-house services where vendored platform controls don't fit.
• Build and maintain high Operational Excellence (OE) practices for tier-0 security platforms with rigorous on-call rotations, clear escalation paths, and minimal downtime, since these systems are load-bearing for every other team's ability to ship and operate safely.
• Drive continuous hardening of AWS and GCP environments so insecure defaults are annihilated and prevented before they ever reach production.
• Influence and enable the secure and responsible adoption of AI tooling and agentic workflows from a platform hardening and access-control perspective.

📌 Required Qualifications

• 12+ years of experience as a Security or Infrastructure Platform Engineer at an internet-scale organization, with 3+ years of demonstrated technical leadership leading teams building outcomes at global scale.
• Deep hands-on expertise hardening AWS and/or GCP at scale, including account structure, guardrails, workload and network posture, and golden image pipelines.
• Demonstrated technical leadership operating access and secrets infrastructure such as Teleport, HashiCorp Vault, or equivalent PAM/secrets-management platforms, including the on-call rigor required to run them as tier-0 services.
• Track record of building and running highly available, no-downtime platform services with mature on-call practices, incident response, and root cause analysis.
• Master's degree in Computer Science, Security Engineering, a related field, or equivalent work experience.
• Demonstrated technical leadership designing scalable security platform controls and processes that meet required regulatory requirements.
• Exceptional problem solving of complex, systemic infrastructure issues that require audacious thinking, rigor, and creativity.
• Exceptional verbal and written communication skills - you will confidently shape and lead the Security Engineering Platform function globally and influence stakeholders across core infrastructure, product, and other engineering teams toward hardened, secure-by-default outcomes.

🎁 Benefits

In addition to base salary, the compensation for this role includes opportunities for equity grants. Talk to your recruiter for more information.

DoorDash cares about you and your overall well-being. That’s why we offer a comprehensive benefits package to all regular employees, which includes a 401(k) plan with employer matching, 16 weeks of paid parental leave, wellness benefits, commuter benefits match, paid time off and paid sick leave in compliance with applicable laws (e.g. Colorado Healthy Families and Workplaces Act). DoorDash also offers medical, dental, and vision benefits, 11 paid holidays, disability and basic life insurance, family-forming assistance, and a mental health program, among others.

To learn more about our benefits, visit our careers page here.

See below for paid time off details:

• For salaried roles: flexible paid time off/vacation, plus 80 hours of paid sick time per year.
• For hourly roles: vacation accrued at about 1 hour for every 25.97 hours worked (e.g. about 6.7 hours/month if working 40 hours/week; about 3.4 hours/month if working 20 hours/week), and paid sick time accrued at 1 hour for every 30 hours worked (e.g. about 5.8 hours/month if working 40 hours/week; about 2.9 hours/month if working 20 hours/week).

🛂 Visa & Eligibility

We will consider for employment any qualified applicant, including those with arrest and conviction records, in a manner consistent with the applicable regulation.

If you need any accommodations, please inform your recruiting contact upon initial connection.