3 hours ago
Remote, United StatesMid Level
H1B sponsor
Base Salary
$131k - $192k/yr
Responsibilities
- Translate threat intelligence, incidents, investigative needs, and observed behavior into production detections that reduce noise and provide actionable context.
- Build, test, deploy, tune, and maintain detections and supporting pipelines using reliable source-controlled engineering practices.
- Correlate enterprise, marketplace, physical security, OSINT, support, and other telemetry to identify and prioritize potential threats.
- Apply rules, statistical methods, machine learning, and LLM-based techniques to improve detection quality, prioritization, and investigative context.
- Investigate detections by querying data, validating hypotheses, and assessing confidence, scope, and potential impact with Protective Services partners.
- Continuously improve detection logic, tooling, and workflows using investigation outcomes, false positives, missed indicators, and investigative friction.
- Contribute to technical reviews, testing, documentation, standards, and automation that improve detection reliability and maintainability.
- Participate in on-call rotations and support major investigations while communicating the confidence and limitations of available signals.
Requirements
- 3+ years of experience in detection engineering, threat hunting, incident response, security operations engineering, technical threat intelligence, or software engineering applied to security problems.
- Experience contributing to production detection pipelines with source control, testing, review, deployment, and monitoring practices.
- Proficiency in SQL or a security query language and ability to write maintainable code in Python, Go, or another relevant language.
- Strong analytical skills, including exploring unfamiliar datasets, assessing data quality, troubleshooting across systems, and developing testable detection hypotheses.
- Experience triaging alerts and investigations, correlating signals, assessing confidence and scope, and communicating evidence clearly.
- Experience building detections or conducting investigations with security, behavioral, or other relevant telemetry.
- Experience using automation or analytics to improve detection and investigation workflows; familiarity with machine learning or LLM-based techniques is preferred.
- Familiarity with MITRE ATT&CK or D3FEND for organizing detection coverage and identifying gaps.
- Strong collaboration and communication skills, including the ability to handle sensitive information appropriately.
- Bachelor’s degree or equivalent practical experience.
- Experience with Snowflake, Cortex, or Google SecOps is preferred.
Benefits
- 401(k) plan with employer matching.
- 16 weeks of paid parental leave, wellness benefits, commuter benefits match, paid time off, and paid sick leave where required by law.
- Medical, dental, and vision benefits, 11 paid holidays, disability and basic life insurance, family-forming assistance, and a mental health program.
- Salaried employees receive flexible paid time off or vacation plus 80 hours of paid sick time per year; hourly accrual details are also provided.
- The position is expected to be filled by 28 November 2026 and includes participation in an on-call rotation.
About DoorDash
DoorDash builds a marketplace and logistics platform that connects consumers with local restaurants and retailers for on-demand delivery and pickup, powered by a network of independent Dashers. It earns through delivery fees, merchant commissions, advertising, DashPass subscriptions, and white-label fulfillment via DoorDash Drive. Founded in 2013 and headquartered in San Francisco, the public company operates across the U.S. and selected international markets, and also researches automation through DoorDash Labs.