[Hiring] Engineering Manager, Proactive Security @DoorDash USA

Role Description

Our Security Engineering team is looking for an Engineering Manager, Proactive Security to set and lead the technical direction for platform hardening at DoorDash, Wolt, and Deliveroo globally. You will be a part of our inclusive, collaborative global team responsible for building “paved road” Platform Security controls to harden our compute and storage platforms and provide for a safe, secure, and resilient delivery network. This is a US remote position reporting directly to the Director of our Security Engineering team.

You’re excited about this opportunity because you will…

• Set and execute the technical vision for the Security Engineering Platform team, spanning AWS and GCP account/workload hardening, and vital tier-0 services (Access, Identity, Teleport, HashiCorp Vault, Tokenization, and others).
• Influence and drive improvements to engineering standards, leverage advancements and LLMs to improve productivity and velocity.
• Own the hardening roadmap for tier-0 cloud infrastructure and access services, backed by rigorous, follow-the-sun on-call.
• Coach and mentor highly skilled tech leads and engineers as a "player-coach," leaning in at the lowest technical level on cloud hardening, identity, and secrets management problems.
• Partner cross-functionally with Core Infrastructure, Compute, Data, and other engineering platform teams to harden the shared cloud and access substrate.
• Build and maintain high Operational Excellence (OE) practices for tier-0 security platforms with rigorous on-call rotations, clear escalation paths, and minimal downtime.
• Drive continuous hardening of AWS and GCP environments so insecure defaults are annihilated and prevented before they ever reach production.
• Influence and enable the secure and responsible adoption of AI tooling and agentic workflows from a platform hardening and access-control perspective.

Qualifications

• 12+ years of experience as a Security or Infrastructure Platform Engineer at an internet-scale organization, with 3+ years of demonstrated technical leadership leading teams building outcomes at global scale.
• Deep hands-on expertise hardening AWS and/or GCP at scale, including account structure, guardrails, workload and network posture, and golden image pipelines.
• Demonstrated technical leadership operating access and secrets infrastructure such as Teleport, HashiCorp Vault, or equivalent PAM/secrets-management platforms.
• Track record of building and running highly available, no-downtime platform services with mature on-call practices, incident response, and root cause analysis.
• Master's degree in Computer Science, Security Engineering, a related field, or equivalent work experience.
• Demonstrated technical leadership designing scalable security platform controls and processes that meet required regulatory requirements.
• Exceptional problem solving of complex, systemic infrastructure issues that require audacious thinking, rigor, and creativity.
• Exceptional verbal and written communication skills.

Benefits

• Exceptional compensation packages and comprehensive health benefits.
• 401(k) plan with employer matching.
• 16 weeks of paid parental leave.
• Wellness benefits.
• Commuter benefits match.
• Paid time off and paid sick leave in compliance with applicable laws.
• Medical, dental, and vision benefits.
• 11 paid holidays.
• Disability and basic life insurance.
• Family-forming assistance.
• Mental health program.