Staff Security Engineer, Security Enablement

Location: United States About the Role Global Safety and Security (GSS) protects our people, our sites, and the physical and logical systems that keep the business running. Our security and protection programs are never single-team efforts: one rollout can touch physical security operations, customer experiences, site readiness, hardware provisioning, networking, cloud infrastructure, identity, and the data platforms above them — spanning many countries, on timelines tied to leases, permits, and vendors. About the Team We are hiring a Staff Security Engineer to help design and deliver strategic and durable security services. You own the technical and architectural plan, strategic partner engagement with technology providers, the delivery sequence, the dependencies, and the program status leadership relies on. You are accountable for outcomes influencing teams that you don’t manage. You will collaborate with software engineers, third-party providers, physical security operations, project managers running site readiness and provisioning, and networking and cloud infrastructure partners, and you will keep managers, directors, and senior leaders informed. Security Enablement Engineering delivers security paved paths and capabilities that address systemic security issues through well-designed customer experiences, easy-to-adopt and robust, well-architected security solutions, systematically reducing organizational risk. You’re excited about this opportunity because you will… Own the design of our physical security systems integration layer — such as access control (PACS) and video management (VMS) platforms, the APIs they expose, and the connectors that carry their data into our systems of record. Own end-to-end design and delivery of multi-domain security services spanning physical security systems, hardware provisioning and site readiness, cloud and network infrastructure, identity and access management, key management, and the reporting/observability layers on top. You’ll bring expertise deploying security solutions at scale across many of these domains. Partner with our software engineers from design through implementation, ensuring the right security outcomes are achieved. Propose and review architecture, design highly resilient, secure and scalable solutions, deliver proactive feedback to drive continuous improvement, hold the interface contracts, and support services in production ensuring operational excellence. Own the cloud footprint of the security stack. The AWS services that host and scale these systems, the identity and network boundaries around them. Own execution of complex and ambiguous security initiatives through detailed working-backwards plans. Start from the outcome and the date, then derive the dependency chain, critical path, owners, and the decisions that must land before each gate. Look around corners. Surface and manage delivery risks before they escalate. Keep a risk register that’s well managed with an owner, a mitigation, and a delivery date. Unblock, and escalate when unblocking requires it. Resolve most cross-team friction through direct collaboration. Escalate early, with a recommendation, and tradeoffs to leadership. Escalation is a deliberate tool, not a last resort. Be the single source of truth on status. Concise written updates for senior leaders: what is on track, what is at risk, what changed, what decision we need. Manage stakeholder expectations from leadership to individual teams, apply strong problem solving and negotiation skills, and earn the trust of partners and teams. Drive technical decisions to closure and operate through ambiguity. Frame the trade-offs, make recommendations on tooling (build/buy) and document what was decided and why. Contribute to the vision, strategy, technical direction, and success metrics. Mentor engineers and program managers across GSS and partner teams. Review their plans, coach them on written status and risk framing, and help continually raise the operational and security bar. Develop shared goals with security partners, and identify solutions that optimize or automate manual, inefficient processes. We’re excited about you because… You have led multi-team, multi-quarter technical programs and owned the outcome across organizational boundaries. You have a deep understanding of at least three security engineering domains and broad understanding across many: Identity and Access Management, Physical Security Systems, Security Operations, Detection and Response, DevSecOps, Security Architecture and Engineering, and Network Security. You can read a network diagram, reason about a cloud deployment topology, understand hardware and firmware lifecycles, and hold a credible conversation with an infrastructure engineer about their constraints. Global-scale software or cloud rollouts, including vendor-supplied platforms deployed across many sites and regions, with the integration and migration work that implies. Exceptional written and verbal communication — plans and status a director can act on and a senior engineer will not dismiss, and the range to convey security priorities and concepts to experts and non-experts alike. Influence without authority, agility in re-planning when reality changes rather than defending the original plan, and comfort with physical-world constraints: sites, hardware, permits, and installers do not behave like pure software programs. You have raised the bar for others without managing them — mentoring engineers and program managers, and improving plans and status through proactive feedback. You have strong ownership, urgency, autonomy and drive. You are willing to roll up your sleeves and dive into the details to understand and drive your programs, and you focus on progress, not perfection. Qualifications Required 6+ years in security or infrastructure engineering, including 4+ leading multi-team technical programs. Bachelor of Science in Computer Science, Security Engineering, Information Systems, or equivalent years of experience in a related technical field Expertise with cloud-based services and infrastructure (AWS, Google Cloud, etc.) Hands-on depth with enterprise access control and video platforms (Lenel, Genetec, Milestone, or peers) and the APIs and integrations around them. Project planning and execution skills that include JIRA experience, reviewing technical design documents, security controls, estimating, and scheduling. Preferred Physical security, access control, or safety-technology programs; a security or trust-and-safety organization; standing up program practice where none existed. Proficiency in SQL data analysis, Python coding, and other automation tooling. Experience with building Agentic workflows. We expect this position to be filled by 12/15/2026 Compensation The successful candidate’s starting pay will fall within the pay range listed below and is determined based on job-related factors including, but not limited to, skills, experience, qualifications, work location, and market conditions. Base salary is localized according to an employee’s work location. Ranges are market-dependent and may be modified in the future. In addition to base salary, the compensation for this role includes opportunities for equity grants. Talk to your recruiter for more information. DoorDash cares about you and your overall well-being. That’s why we offer a comprehensive benefits package to all regular employees, which includes a 401(k) plan with employer matching, 16 weeks of paid parental leave, wellness benefits, commuter benefits match, paid time off and paid sick leave in compliance with applicable laws (e.g. Colorado Healthy Families and Workplaces Act). DoorDash also offers medical, dental, and vision benefits, 11 paid holidays, disability and basic life insurance, family-forming assistance, and a mental health program, among others. To learn more about our benefits, visit our careers page here. See below for paid time off details: For salaried roles: flexible paid time off/vacation, plus 80 hours of paid sick time per year. For hourly roles: vacation accrued at about 1 hour for every 25.97 hours worked (e.g. about 6.7 hours/month if working 40 hours/week; about 3.4 hours/month if working 20 hours/week), and paid sick time accrued at 1 hour for every 30 hours worked (e.g. about 5.8 hours/month if working 40 hours/week; about 2.9 hours/month if working 20 hours/week). The national base pay range for this position within the United States, including Illinois and Colorado. $193,800—$285,000 USD About DoorDash At DoorDash, our mission to empower local economies shapes how our team members move quickly, learn, and reiterate in order to make impactful decisions that display empathy for our range of users—from Dashers to merchant partners to consumers. We are a technology and logistics company that started by enabling door-to-door delivery, and we are looking for team members who can help us go from a company that is known as the place you order food to a company that people turn to for any and all goods. DoorDash is growing rapidly and changing constantly, which gives our team members the opportunity to share their unique perspectives, solve new challenges, and own their careers. We're committed to supporting employees’ happiness, healthiness, and overall well-being by providing comprehensive benefits and perks including premium healthcare, wellness expense reimbursement, paid parental leave and more. Our Commitment to Diversity and Inclusion We’re committed to growing and empowering a more inclusive community within our company, industry, and cities. That’s why we hire and cultivate diverse teams of people from all backgrounds, experiences, and perspectives. We believe that true innovation happens when everyone has room at the table and the tools, resources, and opportunity to excel. Statement of Non-Discrimination: In keeping with our beliefs and goals, no employee or applicant will face discrimination or harassment based on: race, color, ancestry, national origin, religion, age, gender, marital/domestic partner status, sexual orientation, gender identity or expression, disability status, or veteran status. Above and beyond discrimination and harassment based on “protected categories,” we also strive to prevent other subtler forms of inappropriate behavior (i.e., stereotyping) from ever gaining a foothold in our office. Whether blatant or hidden, barriers to success have no place at DoorDash. We value a diverse workforce – people who identify as women, non-binary or gender non-conforming, LGBTQIA+, American Indian or Native Alaskan, Black or African American, Hispanic or Latinx, Native Hawaiian or Other Pacific Islander, differently-abled, caretakers and parents, and veterans are strongly encouraged to apply. Thank you to the Level Playing Field Institute for this statement of non-discrimination. Pursuant to the San Francisco Fair Chance Ordinance, Los Angeles Fair Chance Initiative for Hiring Ordinance, and any other state or local hiring regulations, we will consider for employment any qualified applicant, including those with arrest and conviction records, in a manner consistent with the applicable regulation. If you need any accommodations, please inform your recruiting contact upon initial connection. Notice to Applicants for Jobs Located in NYC or Remote Jobs Associated With Office in NYC Only We used Covey as part of our hiring and/or promotional process for jobs in NYC and certain features may qualify it as an AEDT in NYC. As part of the hiring and/or promotion process, we provided Covey with job requirements and candidate submitted applications. We began using Covey Scout for Inbound from August 21, 2023, through December 21, 2023. We resumed using Covey Scout for Inbound again on June 29, 2024, and ceased using Covey Scout for Inbound on April 30, 2026. The Covey tool has been reviewed by an independent auditor. Results of the audit may be viewed here: . Beware of recruitment scams: DoorDash, Deliveroo, and Wolt will never ask you to pay money or share sensitive financial information during hiring — learn more about our legitimate recruiting process at Recruitment Scam Awareness