Engineering Manager, Red Team at DoorDash (Remote US)

DoorDash connects customers with local businesses for delivery, from restaurants to grocery, retail and its own DashMart stores. DoorDash's Red Team exists to find critical attack paths before real adversaries do. We operate across the full adversary simulation lifecycle — scoping threat-informed engagements, executing realistic attack chains, and working with engineering and detection teams to close the gaps we uncover.

Key responsibilities

• Engagement cadence, target prioritization, and capability development — aligned to DoorDash's threat landscape
• Lead, coach, and grow a team of offensive security engineers
• Stay technically involved in engagement scoping, methodology, and tooling architecture
• Drive remediation outcomes cross-functionally — partner with detection/response, AppSec, infrastructure security
• Build purple team workflows with detection engineering to validate and improve defensive coverage
• Direct the development of red team infrastructure and custom tooling as production-quality software

Requirements

• 7+ years of offensive security experience (red teaming, adversary simulation
• Speak fluently about TTPs, attack chains, tradecraft, and tooling because you've done the work, not just managed it
• Track record of shaping security strategy beyond your own team — influencing engineering, product, or infrastructure organizations to prioritize
• Experience with cloud-native offensive operations (AWS/GCP, Kubernetes, containerized microservices, CI/CD pipelines)
• Coach, develop careers, provide honest feedback, and build team culture where offensive security practitioners grow
• Convince an engineering VP to allocate sprint capacity for remediation, partner with detection teams without being adversarial

Remote details

• Remote role in the United States
• Experience with global or distributed teams across time zones

Salary and benefits

US base salary $193,800 to $285,000 a year. DoorDash also offers benefits; the full list is on the posting.

How to apply

Apply on the company's own site.