At a Glance
- Tasks: Develop and maintain detection logic to combat cyber threats in a dynamic grocery tech environment.
- Company: Join Instacart, a leader in grocery delivery transforming how we access food.
- Benefits: Enjoy flexible work options, competitive salary, and opportunities for professional growth.
- Other info: Mentorship opportunities and a collaborative culture focused on innovation and community.
- Why this job: Make a real impact on security while working with cutting-edge technology and a passionate team.
- Qualifications: 6+ years in detection engineering or related fields; strong understanding of cloud platforms and attacker techniques.
The predicted salary is between 118800 - 145200 $ per year.
We're transforming the grocery industry at Instacart, where we invite the world to share love through food because we believe everyone should have access to the food they love and more time to enjoy it together. We work to deliver an essential service that customers rely on to get their groceries and household goods, while also offering safe and flexible earnings opportunities to Instacart Personal Shoppers.
Instacart is a Flex First team. Our employees have the flexibility to choose where they do their best work - whether it’s from home, an office, or your favorite coffee shop - while staying connected and building community through regular in-person events.
Overview: Instacart's Detection Engineering team sits at the core of our Security organization, building and operating the systems that identify, surface, and respond to threats across one of North America's largest grocery technology platforms. We own the full detection lifecycle, from telemetry collection and signal design to automated response, across a complex, cloud-native environment spanning endpoint, cloud, container, and SaaS.
As a Senior Detection Engineer II, you'll be a technical anchor on the team: developing high-fidelity detection logic, hunting for novel attacker techniques, and raising the bar for how we think about coverage, quality, and scale. You'll work closely with Engineering, Red Team, Incident Response, Fraud, and Trust & Safety to ensure our detections reflect real-world adversary behavior; not just signatures. We operate with a detection-as-code mindset: everything we build is versioned, tested, and deployed through repeatable pipelines. We care deeply about reducing noise, improving analyst efficiency through automation and SOAR, and continuously evolving our coverage as the threat landscape shifts.
If you're energized by hard forensic problems, enjoy translating attacker TTPs into durable detection logic, and want to help shape the future of a growing security function, this role is for you.
About the Job:
- Develop, tune, document, and maintain detection logic across multiple log sources including endpoint, cloud, container, and SaaS products.
- Assist in cyber forensic investigations across a variety of log sources.
- Optimize log ingestion pipelines and telemetry collection to ensure high-quality, actionable security data while managing volume and cost.
- Design and build SOAR playbooks and automation workflows to streamline detection triage, enrichment, and response actions.
- Mentor junior security analysts and detection engineers on threat hunting methodologies, detection logic development, and investigation techniques.
About You:
Minimum Qualifications:
- 6+ years of experience in a detection engineering, incident response, or offensive security role.
- Experience with 1 or more public cloud platforms (AWS, Azure, GCP).
- Deep understanding of attacker TTPs across modern zero trust environments, including identity compromise, token theft, and abuse of trust boundaries.
- Proficient understanding of macOS internals and telemetry available to identify macOS specific threats.
- Experience implementing detection-as-code workflows including version control, peer review processes, automated testing, and CI/CD deployment pipelines.
- Basic proficiency with Python, Golang, or other programming languages.
- Relevant certifications: GCFA, GCFE, GNFA, GREM, OSCP, GCIA, or similar.
Preferred Qualifications:
Senior Detection Engineer II in Winnipeg employer: EngineersOfAI
At Stripe, we pride ourselves on being an exceptional employer that fosters innovation and collaboration within our ML Infra team. Our vibrant work culture encourages continuous learning and growth, offering employees the chance to tackle meaningful challenges in machine learning infrastructure while enjoying competitive benefits and a supportive environment. Located in a dynamic tech hub, we provide unique opportunities for professional development and the chance to make a significant impact in the world of payment solutions.
