The Senior Detection Engineer role at DoorDash focuses on enhancing the technical capabilities of the Protective Services team to identify threats to protected individuals. This hands-on position involves developing detection capabilities across various security signals, including enterprise telemetry and physical security systems. The engineer will work closely with Protective Services partners to translate threat intelligence into actionable alerts and improve detection processes. The role requires participation in an on-call rotation and aims to improve the overall safety and security of DoorDash's operations.

• 7+ years of experience in detection engineering, alert development, or related fields.
• Direct experience building and operating production detection-as-code pipelines.
• A proven track record of building automation that improves detection accuracy and investigative quality.
• Strong investigative judgment and the ability to translate incomplete threat information into testable hypotheses.
• Experience with diverse security or behavioral datasets and assessing data quality.
• Familiarity with telemetry relevant to protective investigations.
• Extensive knowledge of cloud-based and distributed systems.
• Mastery of SQL or SIEM query languages and proficiency in Python or Go.
• Experience using frameworks like MITRE ATT&CK to assess detection coverage.
• A bachelor's degree or equivalent practical experience.

• Conduct hands-on detection engineering for Protective Services.
• Implement risk-based analytics to prioritize meaningful threats.
• Build, test, deploy, and operate detection-as-code pipelines.
• Integrate various signals into detections tailored to protective use cases.
• Work with structured and unstructured data to improve detection and investigation.
• Develop and maintain automation that improves detection efficacy.
• Own the detection lifecycle from hypothesis to retirement.
• Conduct technical triage and investigations to assess confidence and scope.
• Follow detections through investigation and response to improve coverage.
• Coordinate with internal and external partners on threats targeting DoorDash.
• Create and maintain engineering standards and documentation.
• Mentor and uplevel other engineers through collaboration.
• Participate in the on-call rotation and support significant protective cases.