Enterprise Security Engineer

DoorDash is hiring an Enterprise Security Engineer for its US-based team. This role sits within the Global Information Security organization, supporting the security posture for DoorDash, Wolt, and Deliveroo. You will be responsible for implementing and operating security controls that protect the company’s workforce and endpoints, ensuring that security processes remain seamless for employees.

Core Responsibilities

As an Enterprise Security Engineer, you will focus on implementing and tuning security controls, including phishing-resistant multi-factor authentication, conditional access, and SaaS posture management. Your day-to-day work involves operating the security stack—spanning EDR, zero-trust network access, and DLP—while using AI-assisted coding tools to automate workflows and incident response. A key part of this position is addressing modern SaaS risks like shadow IT and OAuth token sprawl, while collaborating with IT and third-party risk teams to establish secure-by-default baselines.

Professional Requirements

To be successful in this role, you should meet the following criteria:

• 5+ years of experience in security engineering, IT security, or a similar field.
• Hands-on experience with identity providers like Okta and Google Workspace.
• Working knowledge of modern authentication standards such as SAML, OAuth 2.0, OpenID Connect, and FIDO2/WebAuthn.
• Experience operating EDR/XDR platforms and managing macOS, Windows, and Linux endpoints via mobile device management (MDM).
• Proficiency in writing production-quality automation scripts in Python or Go.
• Experience with at least one major cloud platform, such as AWS or GCP.
• A Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience is preferred.

This position is based in the USA. The starting pay for this role is $130,600. Within the first six months, you are expected to take ownership of at least one security tool, ship an AI-assisted automation to reduce support tickets, and complete a review of endpoint posture policies. Applications are accepted on an ongoing basis.