Detection Engineer II

Instacart is transforming the grocery industry. The Detection Engineering team builds and operates systems to identify, surface, and respond to threats across a cloud-native environment. As a Detection Engineer II, you'll develop high-fidelity detection logic, hunt for novel attacker techniques, and collaborate with Engineering, Red Team, Incident Response, Fraud, and Trust & Safety.

• Develop, tune, document, and maintain detection logic across endpoint, cloud, container, and SaaS products.
• Assist in cyber forensic investigations across various log sources.
• Optimize log ingestion pipelines and telemetry collection for high-quality, actionable security data.
• Design and build SOAR playbooks and automation workflows to streamline detection triage, enrichment, and response.
• Mentor other detection engineers on threat hunting methodologies and detection development.

• 2+ years in detection engineering, incident response, or offensive security.
• Experience with 1+ public cloud platforms (AWS, Azure, GCP).
• Deep understanding of attacker TTPs in zero trust environments.
• Proficient understanding of macOS internals and telemetry.
• Experience with detection-as-code workflows (version control, CI/CD).
• Basic proficiency in Python, Golang, or other scripting languages.

• Offensive security or red teaming background.
• Knowledge of machine learning for threat detection.

Base pay range: CAN$145,000—$153,000 (dependent on permanent work location). Eligible for new hire equity grant and annual refresh grants. Instacart offers flexible work arrangements.

Apply via the Instacart careers portal.