Threat Response Engineer, Security Operations - Remote

Overview

The Threat Response Engineer, Security Operations will be responsible for conducting investigations and response operations across the incident response life-cycle to mitigate fraud, cyber, and insider threats to DoorDash.

In Short

• Monitor, analyze, and correlate security alerts, logs, and events from various sources
• Lead investigation and containment of security incidents, as incident handler
• Prepare post-mortem reports and conduct lessons learned
• Develop and maintain incident response playbooks and processes
• Coordinate with cross-functional teams, internally and externally, on threats targeting DoorDash
• Lead or participate in security tool proof-of-concepts and documentation
• Identify opportunities for alert development based on threats to DoorDash
• Conduct threat hunting
• Lead training or other education and awareness opportunities for the enterprise as required
• Participate in and support on-call rotation

Requirements

• 5+ years of experience in Incident Response, Threat Hunt, and/or Security Operations.
• Experience working with Global partners in a follow-the-sun model
• Experience with a broad range of technologies including endpoint detection and network technologies, and SOAR/SIEM platforms
• Working knowledge of a scripting language
• Exceptional analytical and investigative abilities
• Experience partnering with cross functional teams to support an investigation
• Excellent understanding of information security operations related frameworks and standards (e.g., MITRE Att&ck and NIST)
• Excellent verbal and written communication, presentation, and stakeholder management skills

Benefits

• Comprehensive benefits and perks
• Opportunity to share unique perspectives and solve new challenges
• Support for employees’ happiness, healthiness, and overall well-being