Analyst

About the Team DoorDash's Protective Services function operates at the intersection of executive protection, residential security, protective intelligence, threat management, and executive cybersecurity across a three-brand global enterprise covering DoorDash, Deliveroo, and Wolt. The Protective Intelligence function is the analytical engine of the program. It runs a real-time AI-enabled threat detection pipeline that surfaces threatening content across platform support channels, monitors open-source and social media environments for signals that never enter the platform, produces intelligence products that drive executive protection and travel security decisions, and builds the threat profiles that inform how the program allocates its resources. The work is technically enabled, analytically demanding, and operationally consequential. About the Role We are hiring a Senior Intelligence Analyst to lead the analytical function of DoorDash's Protective Intelligence program. This role combines high-complexity investigations with strategic intelligence production, providing the analysis that informs executive protection operations, travel security, physical security, and business risk decisions. You will lead complex investigations into threats and concerning behavior, conduct behavioral threat assessments using structured professional judgment methods, produce high-level intelligence products, and deliver intelligence that enables informed security decisions across the business. Beyond investigations, you will assess geopolitical developments, support travel and event planning, contribute to physical security assessments, and identify emerging risks affecting our executives, employees, and operations. As the senior analyst on the team, you will exercise independent analytical judgment, mentor and develop junior analysts, refine investigative methods and operating procedures, and help shape the future of the Protective Intelligence program. What distinguishes this role from a traditional intelligence analyst position is the technical environment it operates in. The detection pipeline that feeds the Protective Intelligence function is built on Snowflake data infrastructure, integrated with an AI-based detection engine, and routed through a case management platform. The Senior Intelligence Analyst does not build or maintain that infrastructure. But they need to understand it well enough to evaluate what it is capturing, identify where it has gaps, and direct analytical work accordingly. You do not need to be a data engineer. You need to be able to read a data schema, understand what a query is returning, and have an informed conversation with the engineers who build the pipeline about whether the detection logic is catching what it should. That fluency is what allows the analytical function to drive the technical function, rather than the other way around. You are excited about this opportunity because you will… Lead complex investigations. Conduct high-complexity investigations into threats, concerning behavior, and insider risks using OSINT, behavioral analysis, and structured case management methods. Own the full investigative lifecycle from intake through disposition, producing case packages that support law enforcement referral, platform action, and executive protection decisions. Exercise independent analytical judgment. Evaluate complex information from multiple sources, distinguish credible threats from background noise, determine appropriate risk classifications, and recommend mitigation strategies with minimal oversight. You are the senior judgment layer on the team and the quality control for every significant analytical output. Conduct behavioral threat assessments. Apply structured professional judgment methods, including WAVR-21 and other behavioral threat assessment frameworks, to evaluate individuals of concern, assess escalation pathways, identify protective factors, and support informed risk mitigation strategies. Evaluate and improve detection pipeline outputs. Work directly with the engineering team to evaluate what the detection pipeline is surfacing, identify gaps in coverage, and drive improvements to detection logic and case routing. You do not need to write production code, but you need to understand data schemas, read query outputs, and have an informed perspective on whether the system is doing what the program needs it to do. The analytical function should be driving the technical function, and that requires a senior analyst who understands both. Produce executive intelligence. Develop executive intelligence reports, travel risk assessments, event security briefings, geopolitical updates, and strategic global intelligence products that provide senior leadership with timely, actionable insights. Translate complex analytical findings into clear, concise products suitable for CISO and Board-level audiences. Support protective operations. Partner closely with Executive Protection and the Physical Security team to provide intelligence that informs protective operations, executive travel, residential security, event planning, and site security assessments. Translate intelligence findings into operational posture recommendations that EP and RST can act on directly. Assess emerging risks. Monitor and analyze geopolitical developments, civil unrest, criminal activity, narratives and protest formations, online threats, and other emerging risks that could impact executives. Maintain awareness of the threat landscape across the activist, ideological, and grievance-driven cohorts that represent the program's primary threat population. Advance investigation standards. Continuously improve investigative methods, reporting standards, AI-enabled workflows, and intelligence collection practices while helping define the future direction of the Protective Intelligence program. Identify opportunities to use emerging analytical tools and technologies to extend the program's detection and investigation capability. Mentor and develop others. Provide guidance, coaching, and quality review for junior analysts while helping establish consistent analytical standards, investigative rigor, and intelligence tradecraft across the team. We are excited about you because you bring… Advanced protective intelligence experience. 5+ years of experience in protective intelligence, intelligence analysis, investigations, executive protection intelligence, corporate security, government intelligence, military intelligence, law enforcement intelligence, or a related field. Exceptional analytical judgment. Demonstrated ability to synthesize complex information, evaluate incomplete or conflicting intelligence, assess credibility, and communicate defensible risk assessments that support executive decision-making. Technical fluency with data and detection systems. You do not need to be a data engineer, but you need to be able to engage with one as a peer. You understand how structured data is organized, can read and interpret query outputs, and have enough familiarity with data schemas and detection logic to evaluate whether a system is capturing what it should. Experience working with Snowflake, SQL, or similar data platforms is a plus. Comfort using AI-enabled research and analytical workflow tools is expected. The program's detection infrastructure is built on technical foundations, and the senior analyst needs to understand those foundations well enough to drive the analytical agenda, not just consume its outputs. Executive-level communication. Experience producing concise, high-quality intelligence products, including executive briefings, strategic intelligence reports, travel assessments, investigative summaries, and risk assessments suitable for senior leadership. Investigative leadership. Extensive experience conducting complex investigations involving online threats, concerning communications, insider risk, executive protection matters, or other high-impact security issues. Global intelligence perspective. Experience researching geopolitical developments, regional security risks, criminal trends, travel threats, or other intelligence topics that affect international business operations. Expertise in behavioral threat assessment. Experience conducting structured behavioral threat assessments using professional judgment methodologies. Formal training in WAVR-21, CTM, TRAP-18, or comparable threat assessment frameworks is highly desirable. Technology and OSINT mastery. Strong OSINT research capabilities and experience using intelligence platforms, commercial databases, social media investigations, mapping tools, monitoring technologies, or AI-enabled analytical workflows. Experience with link analysis, SOCMINT platforms, automated monitoring tooling, or forensic-grade case documentation from prior work in corporate security, law enforcement, or government intelligence is a plus. Mentorship and program development. Experience coaching analysts, reviewing intelligence products, improving investigative methodologies, and contributing to the development of a high-performing intelligence function. High discretion and professionalism. Trusted to manage highly sensitive information involving executives, confidential investigations, and security operations while exercising sound judgment and maintaining strict confidentiality. Education. Bachelor's degree or equivalent experience required. Advanced degree or professional certification in intelligence analysis, security management, or a related discipline preferred. About DoorDash At DoorDash, our mission to empower local economies shapes how our team members move quickly, learn, and reiterate in order to make impactful decisions that display empathy for our range of users—from Dashers to merchant partners to consumers. We are a technology and logistics company that started by enabling door-to-door delivery, and we are looking for team members who can help us go from a company that is known as the place you order food to a company that people turn to for any and all goods. DoorDash is growing rapidly and changing constantly, which gives our team members the opportunity to share their unique perspectives, solve new challenges, and own their careers. We're committed to supporting employees’ happiness, healthiness, and overall well-being by providing comprehensive benefits and perks including premium healthcare, wellness expense reimbursement, paid parental leave and more. Our Commitment to Diversity and Inclusion We’re committed to growing and empowering a more inclusive community within our company, industry, and cities. That’s why we hire and cultivate diverse teams of people from all backgrounds, experiences, and perspectives. We believe that true innovation happens when everyone has room at the table and the tools, resources, and opportunity to excel. Statement of Non-Discrimination: In keeping with our beliefs and goals, no employee or applicant will face discrimination or harassment based on: race, color, ancestry, national origin, religion, age, gender, marital/domestic partner status, sexual orientation, gender identity or expression, disability status, or veteran status. Above and beyond discrimination and harassment based on “protected categories,” we also strive to prevent other subtler forms of inappropriate behavior (i.e., stereotyping) from ever gaining a foothold in our office. Whether blatant or hidden, barriers to success have no place at DoorDash. We value a diverse workforce – people who identify as women, non-binary or gender non‑conforming, LGBTQIA+, American Indian or Native Alaskan, Black or African American, Hispanic or Latinx, Native Hawaiian or Other Pacific Islander, differently-abled, caretakers and parents, and veterans are strongly encouraged to apply. Thank you to the Level Playing Field Institute for this statement of non-discrimination. Pursuant to the San Francisco Fair Chance Ordinance, Los Angeles Fair Chance Initiative for Hiring Ordinance, and any other state or local hiring regulations, we will consider for employment any qualified applicant, including those with arrest and conviction records, in a manner consistent with the applicable regulation. If you need any accommodations, please inform your recruiting contact upon initial connection. Notice to Applicants for Jobs Located in NYC or Remote Jobs Associated With Office in NYC Only We used Covey as part of our hiring and/or promotional process for jobs in NYC and certain features may qualify it as an AEDT in NYC. As part of the hiring and/or promotion process, we provided Covey with job requirements and candidate submitted applications. We began using Covey Scout for Inbound from August 21, 2023, through December 21, 2023. We resumed using Covey Scout for Inbound again on June 29, 2024, and ceased using Covey Scout for Inbound on April 30, 2026. The Covey tool has been reviewed by an independent auditor. Results of the audit may be viewed here: #J-18808-Ljbffr