[Hiring] Detection Engineer II @Instacart

Role Description

Instacart's Detection Engineering team sits at the core of our Security organization, building and operating the systems that identify, surface, and respond to threats across one of North America's largest grocery technology platforms. We own the full detection lifecycle, from telemetry collection and signal design to automated response, across a complex, cloud-native environment spanning endpoint, cloud, container, and SaaS.

As a Detection Engineer, you'll be a technical anchor on the team:

• Develop high-fidelity detection logic.
• Hunt for novel attacker techniques.
• Raise the bar for coverage, quality, and scale.
• Work closely with Engineering, Red Team, Incident Response, Fraud, and Trust & Safety.

We operate with a detection-as-code mindset:

• Everything we build is versioned, tested, and deployed through repeatable pipelines.
• We care deeply about reducing noise and improving analyst efficiency through automation and SOAR.
• Continuously evolve our coverage as the threat landscape shifts.

If you're energized by hard forensic problems, enjoy translating attacker TTPs into durable detection logic, and want to help shape the future of a growing security function, this role is for you.

Qualifications

• 2+ years of experience in a detection engineering, incident response, or offensive security role.
• Experience with 1 or more public cloud platforms (AWS, Azure, GCP).
• Deep understanding of attacker TTPs across modern zero trust environments, including identity compromise, token theft, and abuse of trust boundaries.
• Proficient understanding of macOS internals and telemetry available to identify macOS specific threats.
• Experience implementing detection-as-code workflows including version control, peer review processes, automated testing, and CI/CD deployment pipelines.
• Basic proficiency with Python, Golang, or other programming/scripting languages.
• Relevant certifications: GCFA, GCFE, GNFA, GREM, OSCP, GCIA, or similar.

Requirements

• Background in offensive security or red teaming (preferred).
• Knowledge of machine learning for threat detection (preferred).

Benefits

• Highly market-competitive compensation and benefits.
• Remote work flexibility.
• New hire equity grant and annual refresh grants.