Detection Engineer, Protective Services

Home > Python programming jobs

Detection Engineer, Protective Services in USA

DoorDash
Full time
Email

USA
10/06/2026
Report

Remote

Responsibilities

Translate threat intelligence, incidents, investigative needs, and observed behavior into production detections that surface meaningful risk and actionable context.
Build, test, deploy, tune, and maintain detections and supporting pipelines using source-controlled engineering practices.
Correlate enterprise, marketplace, physical security, OSINT, support, identity, endpoint, and cloud signals to identify and prioritize threats.
Investigate detections by querying data, validating hypotheses, and assessing confidence, scope, and impact with Protective Services partners.
Apply rules, statistical methods, machine learning, and LLM-based techniques where they improve detection quality or investigative context.
Use investigation outcomes, false positives, missed indicators, and investigative friction to improve detection logic, tooling, and workflows.
Contribute to technical reviews, testing, documentation, standards, and automation for reliable detection operations.
Participate in on-call rotations and support major investigations while communicating signal confidence and limitations.

Requirements

At least 3 years of experience in detection engineering, threat hunting, incident response, security operations engineering, technical threat intelligence, or software engineering applied to security problems.
Experience contributing to production detection pipelines with source control, testing, review, deployment, and monitoring practices.
Proficiency in SQL or a security query language and ability to write maintainable code in Python, Go, or another relevant language.
Strong analytical skills, including exploring unfamiliar datasets, assessing data quality, troubleshooting across systems, and creating testable detection hypotheses.
Experience triaging alerts and investigations, correlating signals, assessing confidence and scope, and communicating evidence clearly.
Experience building detections or conducting investigations using security, behavioral, or other relevant telemetry.
Experience using automation or analytics to improve detection and investigation workflows; familiarity with machine learning or LLM-based techniques is a plus.
Familiarity with MITRE ATT&CK or D3FEND for organizing detection coverage and identifying gaps.
Strong collaboration and communication skills and the ability to handle sensitive information appropriately.
Bachelor’s degree or equivalent practical experience.
Experience with Snowflake, Cortex, or Google SecOps is preferred.

Benefits

Comprehensive benefits package including a 401(k) plan with employer matching, medical, dental, and vision coverage, disability and basic life insurance, and 11 paid holidays.
16 weeks of paid parental leave, family-forming assistance, wellness benefits, commuter benefits match, paid time off, paid sick leave, and a mental health program.
Salaried roles receive flexible paid time off or vacation plus 80 hours of paid sick time per year.
The position is expected to be filled by 28 November 2026.

Salary: $131k - $192k/yr

DoorDash

At DoorDash, our mission to empower local economies shapes how our team members move quickly and always learn and reiterate to support merchants, Dashers and the communities we serve. We are a technology and logistics company that started with door-to-door delivery, and we are looking for team me...

Similar positions

Core Services Data Operations

FICO
Full time

Remote
10/15/2026
Salary: Competitive

Mexico

Lead Engineer, Machine Learning

Bjak
Full time

Remote
10/15/2026

Worldwide

Deployed Engineer, Professional Services

LangChain
Full time

Remote
10/15/2026
Salary: Competitive

Singapore, US

Senior Software Engineer, Network Development

CoreWeave
Full time

USA
10/15/2026
Salary: $165k - $220k/yr

Bellevue, WA

Operations Engineer, Tech Foundations

Airbnb
Full time

Remote
10/15/2026

India