Join Instacart: Detection Engineer II

Imagine contributing to a service that truly matters, one that brings joy and sustenance to millions of homes every day. At Instacart, we're not just about delivering groceries; we're about connecting communities and helping people share love through food. We believe everyone deserves easy access to the things they need, freeing up precious time for what truly matters. As a Detection Engineer II, you'll play a vital role in protecting this essential lifeline, ensuring our platform remains secure, trustworthy, and constantly innovating. Your expertise will directly safeguard our customers, shoppers, and our entire ecosystem, empowering us to push the shopping cart forward with confidence.

Overview

Instacart's Detection Engineering team is at the forefront of protecting our dynamic and rapidly evolving platform. We are building robust defenses to identify and respond to threats across our cloud infrastructure, applications, and user ecosystem. This is a fully remote, worldwide opportunity, part of our 'Flex First' approach, which allows you to do your best work from wherever you thrive. You will join a team dedicated to proactive security, innovation, and maintaining the trust our millions of users place in us daily.

Key Responsibilities

Design, develop, and deploy high-fidelity security detections to identify threats and malicious activity across Instacart's environment.
Integrate detection capabilities into our security information and event management (SIEM) systems and various cloud security platforms.
Collaborate closely with incident response, security operations, and engineering teams to enhance threat visibility and streamline response workflows.
Develop automation scripts and tools to improve the efficiency and effectiveness of our detection processes.
Conduct proactive threat hunting exercises to uncover emerging attack vectors and vulnerabilities.
Participate in security incident response, providing expertise to analyze and mitigate detected threats.
Stay current with the latest cybersecurity threats, trends, and technologies, applying new knowledge to continuously improve our detection posture.
Mentor junior team members and contribute to the overall growth of the detection engineering function.

Requirements

More than three years of professional experience in detection engineering, security operations, or a related cybersecurity role.
Proven expertise in developing and implementing security detections, rules, and alerts within SIEM or EDR platforms.
Strong scripting and programming skills (e.g., Python, Go, or similar) for automation and tool development.
Solid understanding of cloud security principles and experience with cloud environments (AWS, GCP, or Azure).
Familiarity with common attack techniques, tactics, and procedures (TTPs) and experience applying frameworks like MITRE ATT&CK.
Experience with log analysis, data correlation, and threat intelligence integration.
Excellent problem-solving abilities and a meticulous approach to security challenges.
Ability to work effectively and independently in a distributed, remote team setting.

What You'll Gain

The chance to make a significant impact on an essential service relied upon by millions.
Opportunities for continuous learning and professional growth within a fast-paced, innovative security team.
A flexible, remote-first work environment that values work-life integration and individual contribution.
The satisfaction of protecting a critical platform and its users from evolving cyber threats.
Collaboration with a diverse, talented, and supportive team of security professionals.