As a Detection Engineer on the Protective Services team at DoorDash, you will focus on building technical capabilities to identify and investigate threats to protected individuals. This hands-on role involves working with various data signals across multiple environments to create actionable intelligence. You will collaborate with senior engineers and participate in an on-call rotation, ensuring the safety of executives and their families. Your work will contribute to enhancing detection capabilities and improving overall security operations.

• 3+ years of experience in detection engineering, threat hunting, incident response, or related fields.
• Experience contributing to production detection pipelines using source control and monitoring practices.
• Proficiency in SQL or a security query language and the ability to write maintainable code in Python, Go, or another relevant language.
• Strong analytical skills to assess data quality and turn threat information into testable detection hypotheses.
• Experience triaging alerts and investigations, correlating signals across data sources, and communicating findings effectively.
• Familiarity with frameworks such as MITRE ATT&CK or D3FEND.
• Bachelor's degree or equivalent practical experience.

• Translate threat intelligence and observed behavior into production detections that surface meaningful risk.
• Build, test, deploy, tune, and maintain detections and supporting pipelines.
• Correlate signals across various data sources to identify and prioritize potential threats.
• Investigate detections by querying and validating hypotheses in partnership with Protective Services.
• Follow detections through investigation and resolution to continuously improve detection logic and workflows.
• Contribute to technical reviews, documentation, and automation to strengthen the detection function.
• Participate in on-call support for major investigations and communicate the confidence of available signals.