Staff Security Engineer, Security Enablement

About the Role Global Safety and Security (GSS) protects our people, our sites, and the physical and logical systems that keep the business running. Our security and protection programs are never single-team efforts: one rollout can touch physical security operations, customer experiences, site readiness, hardware provisioning, networking, cloud infrastructure, identity, and the data platforms above them — spanning many countries, on timelines tied to leases, permits, and vendors. About the Team We are hiring a Staff Security Engineer to help design and deliver strategic and durable security services. You own the technical and architectural plan, strategic partner engagement with technology providers, the delivery sequence, the dependencies, and the program status leadership relies on. You are accountable for outcomes influencing teams that you don’t manage. You will collaborate with software engineers, third-party providers, physical security operations, project managers running site readiness and provisioning, and networking and cloud infrastructure partners, and you will keep managers, directors, and senior leaders informed. Security Enablement Engineering delivers security paved paths and capabilities that address systemic security issues through well-designed customer experiences, easy-to-adopt and robust, well-architected security solutions, systematically reducing organizational risk. You’re excited about this opportunity because you will… Own the design of our physical security systems integration layer — such as access control (PACS) and video management (VMS) platforms, the APIs they expose, and the connectors that carry their data into our systems of record. Own end-to-end design and delivery of multi-domain security services spanning physical security systems, hardware provisioning and site readiness, cloud and network infrastructure, identity and access management, key management, and the reporting/observability layers on top. You’ll bring expertise deploying security solutions at scale across many of these domains. Partner with our software engineers from design through implementation, ensuring the right security outcomes are achieved. Propose and review architecture, design highly resilient, secure and scalable solutions, deliver proactive feedback to drive continuous improvement, hold the interface contracts, and support services in production ensuring operational excellence. Own the cloud footprint of the security stack. The AWS services that host and scale these systems, the identity and network boundaries around them. Own execution of complex and ambiguous security initiatives through detailed working-backwards plans. Start from the outcome and the date, then derive the dependency chain, critical path, owners, and the decisions that must land before each gate. Look around corners. Surface and manage delivery risks before they escalate. Keep a risk register that’s well managed with an owner, a mitigation, and a delivery date. Unblock, and escalate when unblocking requires it. Resolve most cross-team friction through direct collaboration. Escalate early, with a recommendation, and tradeoffs to leadership. Escalation is a deliberate tool, not a last resort. Be the single source of truth on status. Concise written updates for senior leaders: what is on track, what is at risk, what changed, what decision we need. Manage stakeholder expectations from leadership to individual teams, apply strong problem solving and negotiation skills, and earn the trust of partners and teams. Drive technical decisions to closure and operate through ambiguity. Frame the trade-offs, make recommendations on tooling (build/buy) and document what was decided and why. Contribute to the vision, strategy, technical direction, and success metrics. Mentor engineers and program managers across GSS and partner teams. Review their plans, coach them on written status and risk framing, and help continually raise the operational and security bar. Develop shared goals with security partners, and identify solutions that optimize or automate manual, inefficient processes. We’re excited about you because… You have led multi-team, multi-quarter technical programs and owned the outcome across organizational boundaries. You have a deep understanding of at least three security engineering domains and broad understanding across many: Identity and Access Management, Physical Security Systems, Security Operations, Detection and Response, DevSecOps, Security Architecture and Engineering, and Network Security. You can read a network diagram, reason about a cloud deployment topology, understand hardware and firmware lifecycles, and hold a credible conversation with an infrastructure engineer about their constraints. Global-scale software or cloud rollouts, including vendor-supplied platforms deployed across many sites and regions, with the integration and migration work that implies. Exceptional written and verbal communication — plans and status a director can act on and a senior engineer will not dismiss, and the range to convey security priorities and concepts to experts and non-experts alike. Influence without authority, agility in re-planning when reality changes rather than defending the original plan, and comfort with physical-world constraints: sites, hardware, permits, and installers do not behave like pure software programs. You have raised the bar for others without managing them — mentoring engineers and program managers, and improving plans and status through proactive feedback. You have strong ownership, urgency, autonomy and drive. You are willing to roll up your sleeves and dive into the details to understand and drive your programs, and you focus on progress, not perfection. Qualifications Required 6+ years in security or infrastructure engineering, including 4+ leading multi-team technical programs. Bachelor of Science in Computer Science, Security Engineering, Information Systems, or equivalent years of experience in a related technical field Expertise with cloud-based services and infrastructure (AWS, Google Cloud, etc.) Hands-on depth with enterprise access control and video platforms (Lenel, Genetec, Milestone, or peers) and the APIs and integrations around them. Project planning and execution skills that include JIRA experience, reviewing technical design documents, security controls, estimating, and scheduling. Preferred Physical security, access control, or safety-technology programs; a security or trust-and-safety organization; standing up program practice where none existed. Proficiency in SQL data analysis, Python coding, and other automation tooling. Experience with building Agentic workflows. We expect this position to be filled by 12/15/2026 Compensation The successful candidate’s starting pay will fall within the pay range listed below and is determined based on job-related factors including, but not limited to, skills, experience, qualifications, work location, and market conditions. Base salary is localized according to an employee’s work location. Ranges are market-dependent and may be modified in the future. In addition to base salary, the compensation for this role includes opportunities for equity grants. Talk to your recruiter for more information. DoorDash cares about you and your overall well-being. That’s why we offer a comprehensive benefits package to all regular employees, which includes a 401(k) plan with employer matching, 16 weeks of paid parental leave, wellness benefits, commuter benefits match, paid time off and paid sick leave in compliance with applicable laws (e.g. Colorado Healthy Families and Workplaces Act). DoorDash also offers medical, dental, and vision benefits, 11 paid holidays, disability and basic life insurance, family-forming assistance, and a mental health program, among others. To learn more about our benefits, visit our careers page here . See below for paid time off details: For salaried roles: flexible paid time