Job Description
Security Engineering Manager, Corporate Security
UNITED STATES – REMOTE
About the Team
Come help us build the world’s most trusted on-demand, logistics engine for delivery! We’re building a team of great minds to help us secure and maintain a 24×7, no downtime, global infrastructure system that powers DoorDashs multi-sided marketplace of consumers, merchants, and drivers.
About the Role
The Corporate Security Engineering team is designing and building DoorDashs next generation defense for the ever-changing landscape of the DoorDash corporate environment. From collaboration systems, endpoint hardening, AI proliferation in internal workflows and 3rd Party Services, to whatever the next big trend in the tech industry is, the Corporate Security Engineering team is responsible for making sure we have appropriate controls in place to keep customer and company data safe. More importantly, your north star is making security usable, breaking down bad habits and click fatigue in favor of solutions that improve security posture while enabling the business to move faster. As the manager of the Corporate Security Engineering team, youll work with your team of engineers to constantly reassess the risks and threats facing DoorDash and the different operating silos, set the priorities for our security program and truth seek. You will be responsible for managing relationships with sales, product, engineering, legal, finance and business counterparts throughout the company to solve data handling, compliance and security challenges. Occasional travel is required for major planning meetings and to maintain supportive relationships with your direct reports.
Youre excited about this opportunity because you will
- Manage a team of experienced security engineers responsible for defending and hardening the DoorDash corporate environment, its brand, and the data within
- Advocate for innovative solutions to secure a continually evolving corporate environment
- Develop and implement a comprehensive strategy for endpoint hardening, Data Loss Prevention, and SaaS security to ensure the security and compliance of devices and resources
- Drive the Zero Trust philosophy, enforcing corporate identities and policies to safeguard and shield data
- Conduct security reviews for architectural changes and new vendors, and enhance the process through automation and process creation
- Facilitate communication between engineers and stakeholders to grasp business needs, contributing to setting the technical direction for the DoorDash Security program
- Collaborate with the Detection and Threat Response team to enhance incident response processes by refining their ability to respond through the architecture and deployment of host-based security solutions
- Invest in and nurture the growth of the members of the Corporate Security team, their skills, and their careers, embodying the DoorDash value of continuous improvement, striving for “1% Better Every Day.”
Were excited about you because
- Have 6+ years of security engineering with a focus in corporate systems or equivalent industry experience and a minimum of 2 years of management experience
- Have led the implementation and creation of policies for systems and services like Data Loss Prevention, Mobile Device Management, Endpoint Detection Response, secure file sharing, communication systems and more
- You have directly led or contributed to SOX, SOC 1 or SOC 2 compliance certifications, know their importance to the business, and understand how to maintain them
- You are familiar and have a proven track record implementing frameworks such as NIST CSF, ISO 27001, etc
- You are an effective threat and risk modeler, you can almost predict the future which you use to ensure adequate mitigations and remediations are implemented
- You know the difference between progress and perfection, and that working in iterations is sometimes better than waiting to deploy the perfect solution
- Lead with a people-first approach, is able to facilitate a conversation rather than dictate it, and is empathetic to divergent viewpoints
- Bring deep experience providing technical leadership and guidance, leveraging both strategic and analytical thinking to solve problems. Creativity is your superpower, and engineering excellence is your agency
- Are adept at working in a very fast-paced, diverse environment and are comfortable wearing multiple hats to achieve strong security outcomes across multiple organizations
Nice to Have
- Experience with these specific technologies or similar alternatives is not required but helpful.
- Experience maintaining or contributing to open-source projects
- You have strong development skills with Python, Golang or TypeScriptYou have hands on experience working with Slack, Okta and Google Workspace and Google Cloud