Senior Security Engineer – Proactive Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, develop, and enhance paved pathways for controlled access, secrets management, and identity management.

• Conduct threat modeling, security assessments, and testing of tier-0 security services and integrations, ensuring that findings are addressed through remediation efforts.

• Create self-service tools, SDKs, Terraform modules, and integrations for just-in-time access, temporary credentials, and dynamic secrets.

• Lead the transition from long-term credentials and persistent access.

• Collaborate with Core Infrastructure, Compute, Data, and product engineering teams to incorporate paved paths into Kubernetes, CI/CD, AWS, and GCP environments across DoorDash, Wolt, and Deliveroo.

• Engage in a follow-the-sun on-call rotation for tier-0 security services.

• Enhance operational excellence through monitoring, runbooks, incident response, and root cause analysis.

• Facilitate the secure integration of AI tools and agentic workflows by providing access control and secrets management for agents.

• Develop and maintain tier-0 security services for access management, secret storage, and identity management.

⛳️ Requirements

• Over 6 years of experience as a Security, Infrastructure, or Platform Engineer in an internet-scale organization.

• Bachelor’s degree in Computer Science, Security Engineering, a related field, or equivalent professional experience.

• Proficient in software engineering with one or more object-oriented programming languages, such as Go, Java, or Kotlin.

• Demonstrated experience in building security tools, controls, and production services that comply with business and regulatory standards.

• Practical experience with access management and secret storage systems, including PAM, secrets management, or key management solutions.

• Familiarity with OIDC, SAML, mTLS, and workload identity, including SPIFFE, AWS IAM Roles, and GCP Workload Identity.

• Understanding of distributed systems concepts, including replication, consistency, and distributed consensus models like Raft and Paxos.

• Experience with Kubernetes, Terraform, or other infrastructure as code solutions, along with AWS and/or GCP IAM.

• Involvement in threat modeling and security design reviews.

• Hands-on experience in conducting root cause analysis for security incidents.

• Experience managing highly available services with established on-call protocols.

• Strong analytical skills for addressing complex systemic issues.

• Excellent verbal and written communication abilities for effective collaboration across engineering teams.

🏝️ Benefits

• Equity grants

• 401(k) plan with employer matching

• 16 weeks of paid parental leave

• Wellness benefits

• Commuter benefits match

• Paid time off

• Paid sick leave

• Medical benefits

• Dental benefits

• Vision benefits

• 11 paid holidays

• Disability insurance

• Basic life insurance

• Family-forming assistance

• Mental health program

• Flexible paid time off/vacation for salaried positions

• 80 hours of paid sick time annually for salaried positions

• Premium healthcare

• Wellness expense reimbursement