Application Security Engineer - Remote

Overview

The Information Security team at DoorDash is seeking an Application Security Engineer to ensure the security of financial products in a cloud environment.

In Short

• Work with engineering and security leaders on security strategies.
• Perform manual and automated code reviews.
• Conduct regular application security assessments.
• Define and implement security standards and guidelines.
• Provide feedback in engineering design reviews.
• Manage the lifecycle of application vulnerabilities.
• Integrate security tools into CI/CD processes.
• Ensure compliance with information security policies.
• Develop secure network controls for Kubernetes.
• Develop tools for improving security efficiency.

Requirements

• 5+ years of experience in application engineering or information security.
• Deep understanding of OWASP top 10 vulnerabilities.
• Experience with scripting languages (e.g., Python) and other programming languages (e.g., Java).
• Experience with CI/CD pipeline security.
• Experience in payments security or financial technology.
• Exceptional analytical and investigative abilities.
• Excellent verbal and written communication skills.
• Experience managing internal bug bounty programs is a plus.
• Industry certifications (e.g., GWEB, GSSP) are a plus.

Benefits

• 401(k) plan with employer match.
• Paid time off and parental leave.
• Comprehensive medical, dental, and vision benefits.
• Disability and life insurance.
• Mental health program.
• Wellness benefits.
• Paid sick leave in compliance with applicable laws.
• Opportunities for equity grants.