The Senior Detection Engineer, Protective Services position is a remote role based in the United States at DoorDash USA that suits a security professional experienced in building technical detection capabilities for executive and operational safety. This role involves developing detection-as-code pipelines and risk-based analytics to protect individuals and operations across the company.
Role Overview
DoorDash USA is hiring a Senior Detection Engineer, Protective Services to work remotely in the United States. This hands-on security engineering position focuses on identifying threats to protected individuals by combining enterprise security telemetry, marketplace signals, open-source information, and physical security systems. The role reports to the Engineering Manager, Protective Services, and includes participation in an on-call rotation.
Key Responsibilities
Conduct hands-on detection engineering for Protective Services by translating threat intelligence, investigative needs, and observed behavior into custom alerting.
Implement risk-based analytics to reduce unnecessary alert volume, prioritize threats, and provide investigators with actionable context.
Build, test, deploy, and operate detection-as-code pipelines supporting detection at scale.
Integrate enterprise telemetry, marketplace activity, physical security events, OSINT, and support interactions into tailored detections.
Apply rules, statistical methods, machine learning, and LLM-backed techniques to improve detection and investigation.
Develop and maintain automation and agentic tooling to streamline investigative workflows.
Own the full detection lifecycle from hypothesis through retirement while maintaining detection repositories.
Conduct technical triage, investigate incidents, correlate cross-source signals, and assist Protective Services partners with response and mitigation.
Create engineering standards, testing practices, and documentation for service consistency.
Mentor and uplevel other engineers through technical reviews and collaboration.
Participate in the on-call rotation and support significant protective cases.
Requirements
Seven or more years of experience in detection engineering, alert development, threat hunting, incident response, security operations engineering, threat intelligence, or software engineering applied to security.
Direct experience building, maintaining, and operating production detection-as-code pipelines using source control, testing, review, deployment, and monitoring.
Track record of building automation that improves detection accuracy, speed, or investigative quality.
Demonstrated experience building agents or LLM-backed tooling to solve detection or investigation problems.
Strong investigative judgment to translate incomplete threat information into testable hypotheses.
Experience building detections across diverse security or behavioral datasets.
Knowledge of cloud-based and distributed systems with troubleshooting abilities across queries, code, and pipelines.
Mastery of SQL or SIEM query languages such as SPL or KQL, and proficiency in Python, Go, or another relevant language.
Experience using frameworks like MITRE ATT&CK or D3FEND to assess detection coverage.
A bachelor’s degree or equivalent practical experience.
Nice to Have
Familiarity with telemetry relevant to protective investigations such as marketplace activity, physical access, alarms, video, OSINT, or support interactions.
Experience with Snowflake, Cortex, or Google SecOps.
Skills and Tools
SQL
SPL
KQL
Python
Go
Snowflake
Cortex
Google SecOps
MITRE ATT&CK
D3FEND
LLMs
Salary and Benefits
Base salary range: $159,800 to $235,000 USD (localized according to work location).
Opportunities for equity grants.
Comprehensive benefits package including a 401(k) plan with employer matching.
16 weeks of paid parental leave.
Wellness benefits, commuter benefits match, and a mental health program.
Flexible paid time off/vacation plus 80 hours of paid sick time per year for salaried roles.
Medical, dental, and vision benefits, 11 paid holidays, disability and basic life insurance, and family-forming assistance.
About the Company
DoorDash operates an on-demand logistics platform across more than 40 countries, dozens of offices, and tens of thousands of employees. The Global Safety and Security team manages risk and protects people, property, operations, and brand reputation through a people-first approach.
How to Apply
Apply on the official company careers page.
