About this role.
DoorDash is seeking a Staff Security Engineer to lead cybersecurity efforts for its Customer Support and Integrity teams. This remote role involves developing security strategy, implementing controls, and collaborating with multiple departments to protect support operations. The ideal candidate has extensive security engineering experience, cloud expertise, and a track record of securing third-party support environments. The role reports to the Chief of Staff, Global Security and requires strong leadership and technical skills.
Role DNA
A quick view of the complexity, pace, ownership and collaboration implied by the job description.
Job Complexity
5/5Pace & Pressure
4/5Autonomy Level
5/5Communication Load
5/5Salary analysis
Estimated compensation compared with the broader US market for similar roles.
Core skills
Skills and capabilities most closely associated with this opportunity.
Cover letter sample
Dear Hiring Manager,
I am excited to apply for the Staff Security Engineer position at DoorDash. With over 8 years of experience in enterprise security, I have successfully designed and implemented security strategies for global support and sales teams, including third-party call centers and BPOs. My technical expertise spans cloud platforms like GCP and AWS, IAM systems, and security automation, allowing me to build scalable and reliable security solutions. I am eager to leverage this experience to establish and lead the security function for Customer Support and Integrity at DoorDash, ensuring the highest level of protection for our people and partners.
Sample interview questions
I would start by conducting a thorough risk assessment of the current support environment, identifying critical assets, access paths, and potential vulnerabilities. Then I would design a multi-layered security strategy that includes identity and access management, device security, data loss prevention, and continuous monitoring. For third-party BPOs, I would define clear security requirements, conduct due diligence, and implement technical controls like least privilege access and session monitoring to ensure a consistent security posture.
In my previous role, I discovered that support agents were sharing credentials to access sensitive customer data, which posed a significant risk. I remediated this by implementing single sign-on and MFA, coupled with role-based access controls and privilege separation. I also introduced automated monitoring and alerting for unusual access patterns and trained agents on secure practices, reducing the risk of credential sharing and unauthorized access.
I prioritize based on risk severity and business impact. I use a risk matrix to evaluate each initiative's likelihood and potential damage, and then align with stakeholders to understand their strategic goals. By focusing on the highest-risk areas that also support business objectives, I can balance security needs with operational efficiency. I also establish clear metrics and communicate the value of each initiative to gain buy-in from all parties.
I have extensive experience deploying and managing Google Workspace, including configuring security policies, DLP, and access controls. With Chrome Enterprise Premium, I have implemented advanced security features such as context-aware access, real-time URL filtering, and browser-based data protection. This has allowed me to secure remote and BPO workforces by ensuring only compliant devices and users can access sensitive resources.
Immediately I would revoke the compromised credentials, force a password reset, and analyze any suspicious activity to determine the extent of the breach. I would then investigate the root cause, whether it was phishing or a malware infection, and take steps to remediate the issue. I would also follow the incident response process, notify relevant stakeholders, and implement additional security controls like user behavior analytics and enhanced phishing simulations to prevent recurrence.
About the Team
At DoorDash we’re building the industry’s most scalable and reliable delivery network to support our three-sided marketplace of consumers, merchants, and Dashers. Security is paramount to the success of our business, and DoorDash Security aspires to be the world’s best security team. We are committed to protecting our people, partners, customers, and technologies with robust safeguards and unwavering vigilance.
About the Role
Our team is looking for a Lead Security Engineer who will act as the main cybersecurity partner to the Customer Support and Integrity teams and related business areas. This role will establish the dedicated security team for the Customer Support and Integrity business at DoorDash. We are looking for a highly technical, hands-on security engineer who will build the vision, strategy, and drive the execution to secure DoorDash’s global support workforce, solutions, technologies and workflows. This is a US remote position reporting directly to the Chief of Staff, Global Security.
You’re excited about this opportunity because you will…
- Establish the vision, strategy and success metrics for the Customer Support and Integrity Security function with inputs from partner teams like Customer Experience, Merchant Experience, Sales Operations, Enterprise Security and GRC.
- Lead the technical direction and roadmap execution for Customer Support and Integrity Security to reduce security risk associated with support agents and tooling.
- Work directly with Customer Support and Integrity, Merchant Experience, Enterprise Security, Engineering, Product, GRC and related teams to enact security strategies for DoorDash’s support tooling and support agents.
- Design and Operationalize security controls, to reduce risk and promote widespread adoption of secure solutions and best practices across internal and third party support populations
- Establish clear, measurable metrics to demonstrate and track the performance and impact of the Customer Support and Integrity security programs and initiatives
- Perform security testing and validation of support teams, processes and systems to identify security gaps and remediation plans
- Drive alignment across multiple organizations, build durable operating mechanisms, and improve how the company proactively manages security risks at scale.
- Be the trusted primary partner for the Customer Support and Integrity organization on all things security and connector between the two teams.
We’re excited about you because…
- 8+ years of experience as a security engineer in an enterprise security, corporate security or infrastructure security discipline.
- Proven track record designing and implementing security solutions at scale for support and sales populations including internal and third party users (Call centers, Business Process Outsourcers, etc.)
- Experience working directly with third party support organizations (call centers, Business Process Outsourcers)
- Can deeply and confidently speak to security engineering, system architecture, scalability and reliability decisions, and design trade offs.
- A customer first and owner mindset
- Possess a breadth of technical experience across various infrastructure and security areas running in large production environments
- Proficient in analyzing code, architecture and designs from a security perspective
- Well versed with scripting languages (e.g. Python) and other programming languages (e.g. Java). Golang experience is a plus.
- Strong experience with infrastructure as a code tooling like Terraform.
- Experience with IAM platforms (e.g. Okta, GoogleWorkspace).
- Hands-on experience with GoogleWorkspace products, especially Google Chrome Enterprise Premium
- Expertise with cloud infrastructure and management in GCP and AWS
- Experience solving complex, systemic issues at scale that require creative thinking and solutions.
- Exceptional analytical and investigative abilities with hands-on experience leading root cause analysis.
- Excellent verbal and written communication skills – you can understand and review design documents with respect to cloud infrastructure with engineering personnel.
- Experience with access management, abuse prevention, operational controls, incident management, or platform risk programs
- Experience building scalable governance frameworks, escalation models, or operational control mechanisms
- Experience leveraging AI, automation, or workflow tooling to improve operational scale and resilience
- Experience operating across global teams and time zones
We expect this position to be filled by 8/10/26.
Compensation
The successful candidate’s starting pay will fall within the pay range listed below and is determined based on job-related factors including, but not limited to, skills, experience, qualifications, work location, and market conditions. Base salary is localized according to an employee’s work location. Ranges are market-dependent and may be modified in the future.
In addition to base salary, the compensation for this role includes opportunities for equity grants. Talk to your recruiter for more information.
DoorDash cares about you and your overall well-being. That’s why we offer a comprehensive benefits package to all regular employees, which includes a 401(k) plan with employer matching, 16 weeks of paid parental leave, wellness benefits, commuter benefits match, paid time off and paid sick leave in compliance with applicable laws (e.g. Colorado Healthy Families and Workplaces Act). DoorDash also offers medical, dental, and vision benefits, 11 paid holidays, disability and basic life insurance, family-forming assistance, and a mental health program, among others.
To learn more about our benefits, visit our careers page here.
See below for paid time off details:
- For salaried roles: flexible paid time off/vacation, plus 80 hours of paid sick time per year.
- For hourly roles: vacation accrued at about 1 hour for every 25.97 hours worked (e.g. about 6.7 hours/month if working 40 hours/week; about 3.4 hours/month if working 20 hours/week), and paid sick time accrued at 1 hour for every 30 hours worked (e.g. about 5.8 hours/month if working 40 hours/week; about 2.9 hours/month if working 20 hours/week).
About DoorDash
At DoorDash, our mission to empower local economies shapes how our team members move quickly, learn, and reiterate in order to make impactful decisions that display empathy for our range of users—from Dashers to merchant partners to consumers. We are a technology and logistics company that started by enabling door-to-door delivery, and we are looking for team members who can help us go from a company that is known as the place you order food to a company that people turn to for any and all goods.
DoorDash is growing rapidly and changing constantly, which gives our team members the opportunity to share their unique perspectives, solve new challenges, and own their careers. We’re committed to supporting employees’ happiness, healthiness, and overall well-being by providing comprehensive benefits and perks including premium healthcare, wellness expense reimbursement, paid parental leave and more.
Our Commitment to Diversity and Inclusion
We’re committed to growing and empowering a more inclusive community within our company, industry, and cities. That’s why we hire and cultivate diverse teams of people from all backgrounds, experiences, and perspectives. We believe that true innovation happens when everyone has room at the table and the tools, resources, and opportunity to excel.
Statement of Non-Discrimination: In keeping with our beliefs and goals, no employee or applicant will face discrimination or harassment based on: race, color, ancestry, national origin, religion, age, gender, marital/domestic partner status, sexual orientation, gender identity or expression, disability status, or veteran status. Above and beyond discrimination and harassment based on “protected categories,” we also strive to prevent other subtler forms of inappropriate behavior (i.e., stereotyping) from ever gaining a foothold in our office. Whether blatant or hidden, barriers to success have no place at DoorDash. We value a diverse workforce – people who identify as women, non-binary or gender non-conforming, LGBTQIA+, American Indian or Native Alaskan, Black or African American, Hispanic or Latinx, Native Hawaiian or Other Pacific Islander, differently-abled, caretakers and parents, and veterans are strongly encouraged to apply. Thank you to the Level Playing Field Institute for this statement of non-discrimination.
Pursuant to the San Francisco Fair Chance Ordinance, Los Angeles Fair Chance Initiative for Hiring Ordinance, and any other state or local hiring regulations, we will consider for employment any qualified applicant, including those with arrest and conviction records, in a manner consistent with the applicable regulation.
If you need any accommodations, please inform your recruiting contact upon initial connection.
Notice to Applicants for Jobs Located in NYC or Remote Jobs Associated With Office in NYC Only
We used Covey as part of our hiring and/or promotional process for jobs in NYC and certain features may qualify it as an AEDT in NYC. As part of the hiring and/or promotion process, we provided Covey with job requirements and candidate submitted applications. We began using Covey Scout for Inbound from August 21, 2023, through December 21, 2023. We resumed using Covey Scout for Inbound again on June 29, 2024, and ceased using Covey Scout for Inbound on April 30, 2026.
The Covey tool has been reviewed by an independent auditor. Results of the audit may be viewed here: https://getcovey.com/nyc-local-law-144.
Upload your resume now
- To unlock remote work opportunities and be discovered by global employers.
This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.
