Senior Detection Engineer

ABOUT THE ROLE Instacart is a leading grocery technology company transforming the industry by providing access to the food people love and more time to enjoy it together. As a Senior Detection Engineer on our Detection Engineering team, you will play a critical role in building and operating the systems that identify, surface, and respond to threats across our complex, cloud-native environment. WHAT YOU'LL DO As a technical anchor on the team, you will develop high-fidelity detection logic, hunt for novel attacker techniques, and raise the bar for how we think about coverage, quality, and scale. You will work closely with Engineering, Red Team, Incident Response, Fraud, and Trust & Safety to ensure our detections reflect real-world adversary behavior. Your responsibilities will include: Developing, tuning, documenting, and maintaining detection logic across multiple log sources, including endpoint, cloud, container, and SaaS products Assisting in cyber forensic investigations across a variety of log sources Optimizing log ingestion pipelines and telemetry collection to ensure high-quality, actionable security data while managing volume and cost Designing and building SOAR playbooks and automation workflows to streamline detection triage, enrichment, and response actions Mentoring junior security analysts and detection engineers on threat hunting methodologies, detection logic development, and investigation techniques WHAT YOU'LL NEED To be successful in this role, you will require: 5+ years of experience in a detection engineering, incident response, or offensive security role Experience with 1 or more public cloud platforms (AWS, Azure, GCP) Deep understanding of attacker TTPs across modern zero trust environments, including identity compromise, token theft, and abuse of trust boundaries Proficient understanding of macOS internals and telemetry available to identify macOS specific threats Experience implementing detection-as-code workflows, including version control, peer review processes, automated testing, and CI/CD deployment pipelines Basic proficiency with Python, Golang, or other programming languages Relevant certifications: GCFA, GCFE, GNFA, GREM, OSCP, GCIA, or similar WHY REMOTE As a Flex First team, we offer the flexibility to choose where you do your best work – whether that's from home, an office, or your favorite coffee shop. You will be connected and building community through regular in-person events. BENEFITS Instacart provides highly market-competitive compensation and benefits in each location where our employees work. This role is remote, and the base pay range for a successful candidate is dependent on their permanent work location. The base pay ranges for a successful candidate in CA, NY, CT, and NJ are $199,000 - $210,000 USD per year. This role is also eligible for a new hire equity grant as well as annual refresh grants.