Enterprise Security Engineer

About the Role

The day-to-day responsibilities of this role will be varied and challenging, from tuning security tools to building automation scripts, and from partnering with other teams to implementing AI-assisted security solutions. You will have the chance to work on a wide range of projects, from endpoint detection and response to identity-aware proxies, and from data loss prevention to software-as-a-service posture management.

As a member of the Enterprise Security team, you will report to the US Enterprise Security Team Lead and will be an integral part of the company's efforts to mature security across its three global brands. You will have the opportunity to work on exciting projects, such as implementing phishing-resistant multi-factor authentication, conditional access, and device trust, as well as building automation that removes repetitive work and partnering with teams to make the secure path the easy one.

What You Will Do

• Implement and tune core security controls that protect employees across three global brands
• Operate the day-to-day security stack, spanning endpoint detection and response, zero-trust network access, identity-aware proxies, browser security, and data loss prevention
• Use AI-assisted coding tools to automate security workflows, incident response, and compliance evidence collection
• Address modern SaaS risk, such as shadow IT, OAuth token sprawl, and high-risk application reviews
• Partner with IT and third-party risk teams to ensure the security of DoorDash's systems and data
• Help teams adopt secure-by-default baselines, so that security supports their work rather than blocking it
• Implement and operate security controls, such as multi-factor authentication, conditional access, and device trust
• Build automation that removes repetitive work and partners with teams to make the secure path the easy one
• Operate EDR/XDR platforms and secure macOS, Windows, and Linux endpoints through mobile device management
• Write production-quality automation scripts and communicate clearly in writing

What We Are Looking For

• 5+ years of experience in security engineering, enterprise security, IT security, or a related field
• Hands-on experience administering identity providers, such as Okta, and Google Workspace
• Working knowledge of modern authentication standards, such as SAML, OAuth 2.0, OpenID Connect, and FIDO2/WebAuthn
• Practical experience operating EDR/XDR platforms and securing endpoints through mobile device management
• Hands-on experience with at least one major cloud platform, such as AWS or GCP
• Ability to write production-quality automation scripts, such as Python or Go
• Clear communication skills, both written and verbal
• Experience with security frameworks and compliance standards, such as ISO 27001 or SOC 2
• Experience with SaaS Security Posture Management, CASB, or OAuth-scope governance
• Experience operating DLP controls, particularly native DLP capabilities in major SaaS platforms

Nice to Have

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience
• Hands-on experience with one or more of the following: Tailscale, Google IAP, GitHub enterprise controls, Palo Alto Cortex, or Chrome Enterprise
• Experience with Infrastructure-as-code, such as Terraform, applied to security tooling
• Experience supporting ISO 27001 or SOC 2 audits
• Contributions to the security community, such as blog posts, conference talks, bug bounty, or open source
• Relevant certifications, such as CISSP Associate or GIAC

Benefits and Perks

• Competitive salary and benefits package
• Opportunity to work with a talented team of security professionals
• Flexible and remote work arrangements
• Professional development and training opportunities
• Access to the latest security tools and technologies
• Comprehensive health insurance and wellness programs
• Generous PTO and holiday policy
• Remote stipend and home office setup support
• Equity and stock options
• Recognition and reward programs for outstanding performance

• Make sure to highlight your experience with security frameworks and compliance standards, such as ISO 27001 or SOC 2, in your application.
• Showcase your ability to write production-quality automation scripts, such as Python or Go, and provide examples of your work.
• Emphasize your hands-on experience with identity providers, such as Okta, and Google Workspace, as well as your knowledge of modern authentication standards.
• Be prepared to discuss your experience with EDR/XDR platforms and endpoint security, as well as your ability to communicate complex technical concepts clearly and concisely.
• Research the company's security posture and be prepared to ask informed questions about their approach to security and compliance.
• Consider including examples of your contributions to the security community, such as blog posts or conference talks, to demonstrate your expertise and passion for security.
• Be prepared to negotiate your salary and benefits package, and make sure to research the market rate for security engineers in your area.