below marketmost similar roles pay hereabove market
This role pays less than
62%
of similar roles. Most pay
$145,000–$216,000
— the blue band above.
At the midpoint, this role pays about
$161k
versus about
$180k
for comparable roles.
Based on 240 similar postings.
Employer
About DoorDash, Inc
DoorDash, Inc. is an American company operating online food ordering and food delivery. It trades under the symbol DASH. With a 56% market share, DoorDash is the largest food delivery platform in the United States.
DoorDash, Inc currently has
83 open roles
on FindRole.
Listed pay typically runs
$159,800–$235,000
across 82 roles with salary data.
The Detection Engineer, Protective Services joins the Global Safety and Security team to identify threats against executives, their families, and supporting operations. This role involves building technical capabilities to detect risks across identities, endpoints, cloud environments, marketplace activity, physical access events, and open-source information. You will build, test, deploy, and tune production detections and supporting pipelines using source-controlled engineering practices. Key responsibilities include correlating signals from enterprise telemetry and OSINT to separate meaningful risk from noise. You will use SQL, Python, or Go to write maintainable code and may utilize machine learning or LLM-based techniques. The role requires applying statistical methods and frameworks like MITRE ATT&CK or D3FEND to solve complex security problems, ensuring timely, actionable intelligence is provided to the Protective Services team.
Build, test, deploy, and maintain production detections and supporting pipelines using source-controlled engineering practices.
Translate threat intelligence and observed behaviors into production detections that surface meaningful risk and provide actionable context.
Correlate signals across enterprise telemetry, marketplace activity, physical security events, and open-source information to identify threats.
Apply rules, statistical methods, machine learning, and LLM-based techniques to improve detection quality and prioritization.
Investigate detections by querying data, validating hypotheses, and assessing confidence and potential impact in partnership with Protective Services.
Continuously improve detection logic, tooling, and workflows based on outcomes from investigations and false positives.
Contribute to technical reviews, documentation, and automation to strengthen the reliability of the detection function.
Participate in an on-call rotation and support major investigations by communicating the limitations of available signals.
What we're looking for
3+ years of experience in detection engineering, threat hunting, incident response, security operations engineering, technical threat intelligence, or software engineering.
Experience contributing to production detection pipelines using source control, testing, review, deployment, and monitoring practices.
Proficiency in SQL or a security query language and the ability to write maintainable code in Python, Go, or another relevant language.
Strong analytical skills to explore unfamiliar datasets, troubleshoot across systems, and turn threat information into testable detection hypotheses.
Experience triaging alerts, correlating signals across data sources, and communicating evidence-based findings.
Experience building detections or conducting investigations using security, behavioral, or other relevant telemetry.
Familiarity with frameworks such as MITRE ATT&CK or D3FEND for organizing detection coverage and identifying gaps.
Bachelor’s degree or equivalent practical experience.
Experience with Snowflake, Cortex, or Google SecOps (preferred).