Security Engineer, Insider Threat

About this role

DoorDash seeks a Security Engineer specializing in insider threat investigations to identify anomalous behaviors, develop detection capabilities, and conduct complex investigations. You'll work within the Security Operations team to scale insider threat programs through detection engineering, threat analysis, and cross-functional collaboration.

What you'll do

• Investigate anomalous activity and behaviors using monitoring platforms to identify potential insider risks
• Develop and implement detection use cases and playbooks to identify similar threats at scale
• Support implementation of custom tooling and UEBA/UAM platforms to alert on suspicious behaviors
• Create standard operating procedures and coordinate investigation workflows across legal, HR, and security teams
• Prepare investigative reports, briefings, and maintain chain-of-custody documentation
• Leverage AI-assisted workflows to automate insider threat investigations and detection capabilities

What they're looking for

• Insider threat investigations and incident response
• SIEM/SOAR, UEBA, UAM, and DLP platform experience
• SQL and data query proficiency for large-scale datasets
• Scripting and automation in cloud environments
• Version control systems (Git) and workflow management
• Written and verbal communication for stakeholder reporting
• Log analysis and data pipeline understanding
• Federal law enforcement background (preferred)

Benefits

• Equity grant opportunities
• 401(k) plan with employer matching
• 16 weeks of paid parental leave
• Medical, dental, and vision insurance coverage
• Paid time off, paid sick leave, and 11 paid holidays
• Mental health program and family-forming assistance