Enterprise Security Engineer

DoorDash USA

4d•$130,600 - $192,000

About The Position

The Enterprise Security Engineer will help implement and operate security controls that protect the workforce, endpoints, and corporate software environment across DoorDash, Wolt, and Deliveroo. The role focuses on tuning security tools, automating repetitive workflows, and partnering across the company to make secure practices easy to adopt. The position is part of the Enterprise Security team within Global Information Security and reports to the US Enterprise Security Team Lead. Enterprise Security serves as the primary point of contact for employee-focused security. The team builds secure-by-default systems, processes, controls, and self-service tooling, working closely with IT, Legal, Privacy, and Engineering to protect employees, devices, and data. The engineer will help mature security across the three global brands and use AI-assisted approaches to improve security operations. Success in the first six months includes owning day-to-day operation of at least one Enterprise Security tool, shipping an AI-assisted automation that eliminates a recurring Jira support-ticket category, and completing an exception-handling review of endpoint posture policies to identify drift or gaps.

Requirements

2–5 years of experience in security engineering, enterprise security, IT security, or a related field.
Hands-on experience administering identity providers such as Okta and Google Workspace.
Working knowledge of modern authentication standards, including SAML, OAuth 2.0, OpenID Connect, and FIDO2/WebAuthn.
Practical experience operating EDR/XDR platforms and securing macOS, Windows, and Linux endpoints through MDM.
Hands-on experience with at least one major cloud platform, such as AWS or GCP.
Ability to write production-quality automation scripts, for example in Python or Go.
Clear written communication skills.

Nice To Haves

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.
Hands-on experience with one or more of Tailscale, Google IAP, GitHub enterprise controls, Palo Alto Cortex, or Chrome Enterprise.
Experience with SSPM, CASB, or OAuth-scope governance.
Experience operating DLP controls, particularly native DLP capabilities in major SaaS platforms.
Experience applying infrastructure-as-code tools such as Terraform to security tooling.
Experience supporting ISO 27001 or SOC 2 audits.
Contributions to the security community, such as blog posts, conference talks, bug bounty work, or open source.
Relevant certifications, such as CISSP Associate or GIAC.

Responsibilities

Implement and tune security controls such as phishing-resistant multi-factor authentication, conditional access, device trust, and SaaS posture management.
Operate security tools and platforms, including EDR, zero-trust network access, identity-aware proxies, browser security, and DLP.
Use AI-assisted coding tools to automate security workflows, incident response, and compliance evidence collection, and verify the output before release.
Address SaaS risks such as shadow IT, OAuth token sprawl, and high-risk application reviews in partnership with IT and third-party risk teams.
Help teams adopt secure-by-default baselines that support their work without unnecessarily blocking them.
Take ownership of the day-to-day operation of at least one Enterprise Security tool.
Deliver an AI-assisted automation that removes a recurring Jira support-ticket category.
Review endpoint posture policy exceptions and identify drift or gaps.