Senior Security Engineer, Infrastructure

ABOUT THE ROLE We're seeking a highly skilled Security Engineer to join our CAPS team at Instacart. As a key member of our team, you will be responsible for securing Cloud infrastructure, AI systems, and Product surfaces. You will work closely with all other engineering teams to enable them to roll out new product features and internal productivity systems in a secure way. WHAT YOU'LL DO As a Security Engineer, you will identify business-critical risks across Instacart's cloud accounts, identity stack, AI/agent platforms, and product services. You will define remediation strategies that scale, focusing on guardrails and platform changes over one-off fixes. You will build secure-by-default primitives, such as policy-as-code, paved-road infra modules, and identity and access frameworks, to make the safe path the easy path for product teams. You will also operate the SaaS and internal security platforms that back those guardrails and extend them with internal tooling when off-the-shelf falls short. Additionally, you will lead investigations, root-cause incidents and findings, and drive variant analysis across the codebase to ensure a class of bug is gone, not just one instance. You will also coach and mentor engineers across security and other functions. WHAT YOU'LL NEED To be successful in this role, you will need: - 5+ years of experience in security engineering, with depth in at least two of: cloud security (AWS/GCP), identity & access engineering, vulnerability management at scale, or secure infrastructure platform engineering. - 3+ years of experience performing code reviews and design reviews. - Proficiency in Python or TypeScript sufficient to build and maintain internal services (APIs, scanners, dashboards) - not just glue scripts. - Working knowledge of cloud IAM (roles, trust policies, federation, SCPs/org policies) and the attack paths it enables when misconfigured. - Hands-on Infrastructure-as-Code experience (Terraform, CloudFormation, or equivalent). - Experience driving a remediation program end-to-end: discovery → ownership routing → fix → measurement → prevention. - Understanding of SaaS architectures, common risks, and threat models. - Experience with Variant Analysis, Root Cause Analysis, or Secure Frameworks. WHY REMOTE At Instacart, we're a Flex First team, which means we believe in giving our employees the flexibility to choose where they do their best work - whether that's from home, an office, or their favorite coffee shop. We prioritize staying connected and building community through regular in-person events. BENEFITS Instacart provides highly market-competitive compensation and benefits in each location where our employees work. This role is remote, and the base pay range for a successful candidate is dependent on their permanent work location. Offers may vary based on many factors, such as candidate experience and skills required for the role. Additionally, this role is eligible for a new hire equity grant as well as annual refresh grants.