About the Team

At DoorDash we’re building the industry’s most scalable and reliable delivery network to support our three-sided marketplace of consumers, merchants, and Dashers. Security is paramount to the success of our business, and DoorDash Security aspires to be the world’s most admired security team. We are committed to building the world's most trusted on-demand, logistics engine for delivery! We're expanding our team of great minds to help us secure and maintain a 24x7, no downtime, global infrastructure system that powers DoorDash’s multi-sided marketplace of consumers, merchants, and drivers.

About the Role

We are hiring a Director to lead and scale our global Enterprise Security Engineering function, a critical part of the company’s security and technology foundation. This team builds the security guardrails—baselines, controls, and automated assurance platforms—that make our enterprise secure by design. You will set and own the strategic vision, roadmap, and operational framework for enterprise security engineering; build and develop leaders and teams, ensuring measurable control health and business enablement across global environments. The work blends strategic leadership and operational excellence. You will define the playbook, allocate resources, mentor managers and senior engineers, and make final calls on priorities and direction. Success in this role stems from a deep technical understanding, strong business alignment, and the ability to influence across the entire enterprise. You will partner closely with IT and business leaders to embed guardrails into enterprise platforms and services, ensuring that controls scale globally with reliability, automation, and speed. We prioritize crown-jewel systems and data through explicit risk tiering, driving engineering investments where they have the highest enterprise impact. This role requires executive presence, operational discipline, and a track record of building scalable, secure-by-default programs that enable innovation while reducing risk.

You are excited about this opportunity because you will…

• Define and deliver enterprise guardrails. Own the strategy and drive execution of hardened enterprise baselines across identity, endpoints, SaaS, networks, and data. Ensure durable adoption and measurable control health through automated attestation, SLAs/SLOs, and continuous improvement. Drive adoption across partner functions, ensuring these guardrails become an integrated part of standard enterprise operations.
• Advance Zero Trust. Establish enterprise-wide Zero Trust standards and roadmap—enforcing identity-aware access with continuous attestation of device and user signals. Direct the evolution toward a VPN-free environment by scaling identity- and machine-bound authentication and institutionalizing secure-by-default access patterns.
• Protect data in motion and at rest. Set the company-wide data protection strategy, scaling classification, DLP, and least-privilege enforcement. Drive adoption of managed browsers, data egress controls, and safe-by-default collaboration paths for AI and SaaS tools.
• Lead SaaS hardening, discovery, and control with IT. Define an enterprise security SaaS governance model and ensure compliance with hardening baselines for sanctioned applications. Oversee detection and response to shadow SaaS, and implement data egress enforcement at scale using automation and policy-as-code.
• Scale architecture reviews. Institutionalize secure architecture review practices—embedding threat modeling, trust boundaries, and abuse-case reviews as part of enterprise service delivery. Ensure secure-by-default patterns are enforced through code, automation, and policy frameworks.
• Engineer assurance-as-code. Sponsor and guide development of enterprise policy engines, control plane change gates, and compliance enforcement frameworks for identity, device, SaaS, and network systems. Drive automation and continuous validation as organizational standards across thousands of systems and users.
• Oversee secrets hygiene. Establish accountability for secret management, rotation, and attestation by detecting plaintext secrets in SaaS and on endpoints, blocking egress with managed browsers, routing to approved vaulting, and verifying KMS rotation and attestation signals.
• Review third-party and AI integrations. Define and set pre-production minimums and clearly define exceptions that protect access boundaries and crown-jewel data.
• Strengthen the human edge. Champion user-centric controls and scalable behavior-change programs—such as phishing resilience, managed browsers, and frictionless adoption of secure workflows—to reduce huma