[Remote] Staff Security Engineer, Proactive Security

Note: The job is a remote job and is open to candidates in USA. DoorDash is a technology and logistics company focused on empowering local economies through delivery services. They are seeking a Staff Security Engineer, Proactive Security to lead initiatives ensuring the security of DoorDash’s Dasher Logistics vertical, collaborating with various teams to enhance security measures and address vulnerabilities.

Responsibilities

• Set and own strategic roadmaps for assigned security partner pod and work directly with product, engineering and security leaders to ship product security outcomes into DoorDash’s platform
• Prioritize customer experience, ergonomics and thoughtful security design to prevent an adverse impact to dashers from security flaws
• Go deep and become an expert in the Dasher Logistics engineering vertical, focusing on resolving classes of security vulnerabilities affecting the Dasher ecosystem
• Partner cross-functionally with Core Infrastructure, Product Engineering, Legal, and Security Platform teams to build "paved paths" that provide actionable feedback to embed secure design practices
• Advise and mentor other security engineers to build and deploy security measures and services to secure DoorDash platform and its applications for assigned verticals
• Build solutions to address complex security challenges impacting DoorDash products, performing hands-on manual and automated code reviews to identify vulnerabilities in APIs, microservices, and mobile apps
• Conduct regular application security assessments and manage the lifecycle of application vulnerabilities, from identification to remediation, reporting, and metrics
• Integrate and manage security tools into the CI/CD process and develop tools and automated agentic harnesses for improving our Security efficiency

Skills

• 10+ years of experience as a Software Engineering archetype Product Security Engineer
• Experience working with Global teams managing a diverse portfolio of products and partnering with engineering, product, fraud, and others to secure diverse environments
• Experience providing technical leadership and guidance, and thinking strategically and analytically to solve problems with excellent communication, presentation, and stakeholder management skills
• Lead with a people-first approach, able to facilitate a conversation rather than dictate it, and is empathetic to divergent viewpoints
• Expert understanding of authorization and authentication framework and technologies, with hands-on experience building and deploying secured microservices
• Hands-on experience understanding, identifying, and fixing OWASP top 10 and similar vulnerabilities, with a strong interest in analyzing code, architecture, and design from a security perspective
• Well-versed in at least one object-oriented programming language (e.g., Java, Golang)
• Breadth of technical experience across various application and product security areas running in large cloud native production environments
• Experience with mobile security app hardening, application shielding, and threat modeling mobile APIs is a strong plus

Benefits

• 401(k) plan with employer matching
• 16 weeks of paid parental leave
• Wellness benefits
• Commuter benefits match
• Paid time off and paid sick leave in compliance with applicable laws (e.g. Colorado Healthy Families and Workplaces Act)
• Medical, dental, and vision benefits
• 11 paid holidays
• Disability and basic life insurance
• Family-forming assistance
• Mental health program
• Flexible paid time off/vacation, plus 80 hours of paid sick time per year for salaried roles
• Vacation accrued at about 1 hour for every 25.97 hours worked and paid sick time accrued at 1 hour for every 30 hours worked for hourly roles

Company Overview

Company H1B Sponsorship