Detection Engineer, Protective Services

DoorDash seeks a Detection Engineer for Protective Services to build detection capabilities identifying threats to protected individuals. The role involves translating threat intelligence into detections, correlating signals across enterprise, marketplace, physical security, OSINT, and more. The engineer builds, tests, deploys, and maintains detections using source-controlled practices, and investigates alongside Protective Services. This is a hands-on engineering role with on-call rotation.

3+ years in detection engineering, threat hunting, or related fields. Experience with production detection pipelines, source control, testing. Proficiency in SQL and Python/Go. Strong analytical skills to explore datasets and turn threat info into detection hypotheses. Experience triaging alerts and correlating signals. Familiarity with MITRE ATT&CK. Bachelor's degree or equivalent. Preferred: Snowflake, Cortex, Google SecOps.