Senior Detection Engineer II

Instacart · United States - RemoteRemotesenior

In short

▸Ingeniero de detección senior que crea y mantiene sistemas para detectar amenazas en una plataforma de grocery tech a gran escala.
▸Trabaja con múltiples fuentes de logs (nube, contenedores, endpoints) y automatiza respuestas mediante SOAR.
▸Destaca por su enfoque 'detección como código' y su impacto en la calidad y escalabilidad de las detecciones.

No se requiere inglés explícitamente, pero el texto está en inglés y el rol es para un equ

In ~1 minute you get: who interviews you, the likely questions answered from your CV, and your CV tailored to this job. Free, no card.

What they ask for

✓6+ años en detección, respuesta a incidentes o seguridad ofensiva.
✓Experiencia con al menos una nube pública (AWS, Azure, GCP).
✓Conocimiento profundo de TTPs de atacantes en entornos de zero trust.
✓Capacidad para desarrollar detecciones de alta fidelidad con lógica robusta.
✓Experiencia en optimización de pipelines de ingesta de logs.
✓Mentoría de analistas y detectores junior.

Don't tick every box? That's normal — your free dossier shows your gaps and how to cover them in the interview.

AWSAzureGCPSOAREndpointCloudContainerSaaSDetection-as-codeForensic investigations

Who should you write to at Instacart?

Your free dossier identifies the people who'd interview you — their background, what they value, and how to reach out so you stand out before applying.

We're transforming the grocery industry At Instacart, we invite the world to share love through food because we believe everyone should have access to the food they love and more time to enjoy it together. Where others see a simple need for grocery delivery, we see exciting complexity and endless opportunity to serve the varied needs of our community. We work to deliver an essential service that customers rely on to get their groceries and household goods, while also offering safe and flexible earnings opportunities to Instacart Personal Shoppers. Instacart has become a lifeline for millions of people, and we’re building the team to help push our shopping cart forward. If you’re ready to do the best work of your life, come join our table. Instacart is a Flex First team There’s no one-size fits all approach to how we do our best work. Our employees have the flexibility to choose where they do their best work—whether it’s from home, an office, or your favorite coffee shop—while staying connected and building community through regular in-person events. Learn more about our flexible approach to where we work. Overview Instacarts Detection Engineering team sits at the core of our Security organization, building and operating the systems that identify, surface, and respond to threats across one of North America's largest grocery technology platforms. We own the full detection lifecycle, from telemetry collection and signal design to automated response, across a complex, cloud-native environment spanning endpoint, cloud, container, and SaaS. As a Senior Detection Engineer II, you'll be a technical anchor on the team: developing high-fidelity detection logic, hunting for novel attacker techniques, and raising the bar for how we think about coverage, quality, and scale. You'll work closely with Engineering, Red Team, Incident Response, Fraud, and Trust & Safety to ensure our detections reflect real-world adversary behavior; not just signatures. We operate with a detection-as-code mindset: everything we build is versioned, tested, and deployed through repeatable pipelines. We care deeply about reducing noise, improving analyst efficiency through automation and SOAR, and continuously evolving our coverage as the threat landscape shifts. If you're energized by hard forensic problems, enjoy translating attacker TTPs into durable detection logic, and want to help shape the future of a growing security function, this role is for you. About the Job • Develop, tune, document, and maintain detection logic across multiple log sources including endpoint, cloud, container, and SaaS products. • Assist in cyber forensic investigations across a variety of log sources • Optimize log ingestion pipelines and telemetry collection to ensure high-quality, actionable security data while managing volume and cost • Design and build SOAR playbooks and automation workflows to streamline detection triage, enrichment, and response actions • Mentor junior security analysts and detection engineers on threat hunting methodologies, detection logic development, and investigation techniques About You Minimum Qualifications • 6+ years of experience in a detection engineering, incident response, or offensive security role. • Experience with 1 or more public cloud platforms (AWS, Azure, GCP) • Deep understanding of attacker TTPs across modern zero trust environments, including identity compromise, token theft, and abuse of trust boundar

Don't apply unprepared

We research who's interviewing you, tailor your CV and rehearse you live — first one free.