Manager, Cyber Defense

About the Team

At DoorDash, including international brands Deliveroo and Wolt, we’re building the industry’s most scalable and reliable delivery network to support our three-sided marketplace of consumers, merchants, and Dashers. Global Cyber Defense is a highly talented and globally distributed team that covers response, intelligence, insider risk, threat hunting, automation, and detection engineering.

We exist to keep our brands safe for the Dashers, merchants, and consumers who depend on us. Our mission is to detect, investigate, and respond to cyber threats with speed and precision, while continuously hardening our defenses through automation, AI, and cross-regional collaboration. 

About the Role

The Manager of Cyber Defense will lead the Incident Response capability of our US team. This role is responsible for supporting the organization’s security posture by helping the team identify, investigate, and mitigate cybersecurity threats and incidents, while also advancing automation to improve speed, quality, and scale. The manager will be responsible for the global integration of our program, mentorship of team members, and play an active response role in large scale incidents. 

The team operates in close collaboration with partners in the US, UK, EU, and India, with many team members participating in on-call and follow-the-sun incident response activities. Serving in the incident response and leadership on-call rotation is required for this role. The Manager will report to the Senior Manager of Cyber Defense (also located within the US) and partner closely on execution, team leadership, and operational coverage.

You’re excited about this opportunity because you will…

• Lead and develop the US Threat Response team, part of the US Cyber Defense team.
• Serve as a hands-on people leader, supporting team well-being, performance, career growth, and day-to-day execution.
• Hire, mentor, and develop security professionals, fostering a culture of continuous learning, resilience, knowledge sharing, and strong collaboration.
• Ensure the team is working on the most valuable items from a shared global backlog, with clear priorities and sustainable work-in-progress limits.
• Partner with the Senior Manager and team leads across the UK, Finland, and India to coordinate ownership, resolve resourcing questions, and maintain strong cross-regional execution.
• For exceptional high-priority or high-impact incidents affecting US-based functions, serve as Incident Commander and coordinate response activities with relevant teams.
• Support communications with stakeholders during incidents, including executive updates when needed.
• In partnership with Legal, support engagement with law enforcement where required.
• Track, monitor, and report team metrics and operational outcomes for business reviews and Cyber Defense reporting.
• Execute business-critical projects and operational improvements that strengthen the effectiveness of the Cyber Defense program.
• Help scale and mature team processes, playbooks, and coordination models in support of a global, follow-the-sun response function.
• Advise and execute on long term plans, strategies, and shared work items in collaboration with relevant stakeholders.

We’re excited about you because…

• You have demonstrated experience in information security, including leadership responsibilities in areas such as incident response, incident management, investigations, threat hunting, or threat intelligence.
• You are a player-coach who can execute the technical tasks just as well as you can rally the team around shared goals. 
• You have solid experience scaling and mentoring security teams.
• You are comfortable working with global partners in a follow-the-sun operating model.
• You are an effective people leader who can coach, support, and grow high-performing teams.
• You bring sound judgment during incidents and can help teams stay organized and effective under pressure.
• You think clearly and act pragmatically when balancing urgent operational needs with longer-term improvements.
• You have a strong understanding of information security operations frameworks and operating models. 
• You communicate clearly with technical and non-technical stakeholders, including cross-functional partners and leadership.
• You lead with a people-first approach, invite discussion rather than dictate it, and work well across different viewpoints and functions.
• You are interested in how automation and AI can improve security operations and team effectiveness.

Notice to Applicants for Jobs Located in NYC or Remote Jobs Associated With Office in NYC Only

We use Covey as part of our hiring and/or promotional process for jobs in NYC and certain features may qualify it as an AEDT in NYC. As part of the hiring and/or promotion process, we provide Covey with job requirements and candidate submitted applications. We began using Covey Scout for Inbound from August 21, 2023, through December 21, 2023, and resumed using Covey Scout for Inbound again on June 29, 2024.

The Covey tool has been reviewed by an independent auditor. Results of the audit may be viewed here: Covey