Threat Response Engineer, Security Operations - Remote

Overview

The Threat Response Engineer, Security Operations is responsible for conducting investigations and response operations to mitigate fraud, cyber, and insider threats, ensuring a secure environment at DoorDash.

In Short

• Monitor and analyze security alerts and logs.
• Lead investigation and containment of security incidents.
• Prepare post-mortem reports and conduct lessons learned.
• Develop and maintain incident response playbooks.
• Coordinate with cross-functional teams on threats targeting DoorDash.
• Lead security tool proof-of-concepts and documentation.
• Identify opportunities for alert development.
• Conduct threat hunting.
• Lead training and awareness opportunities.
• Participate in on-call rotation.

Requirements

• 5+ years of experience in Incident Response and Security Operations.
• Experience with global partners in a follow-the-sun model.
• Familiarity with endpoint detection and network technologies.
• Working knowledge of a scripting language.
• Exceptional analytical and investigative abilities.
• Experience partnering with cross-functional teams.
• Understanding of information security frameworks (e.g., MITRE ATT&CK, NIST).
• Excellent verbal and written communication skills.

Benefits

• 401(k) plan with employer matching.
• Paid time off and sick leave.
• 16 weeks of paid parental leave.
• Comprehensive medical, dental, and vision benefits.
• Wellness benefits and commuter benefits.
• Opportunities for equity grants.