Senior Product Security Engineer

Senior Product Security Engineer - Instacart

We're transforming the grocery industry

At Instacart, we invite the world to share love through food because we believe everyone should have access to the food they love and more time to enjoy it together. Where others see a simple need for grocery delivery, we see exciting complexity and endless opportunity to serve the varied needs of our community. We work to deliver an essential service that customers rely on to get their groceries and household goods, while also offering safe and flexible earnings opportunities to Instacart Personal Shoppers.

Instacart has become a lifeline for millions of people, and we’re building the team to help push our shopping cart forward. If you’re ready to do the best work of your life, come join our table.

Instacart is a Flex First team

There’s no one-size fits all approach to how we do our best work. Our employees have the flexibility to choose where they do their best work—whether it’s from home, an office, or your favorite coffee shop—while staying connected and building community through regular in-person events. Learn more about our flexible approach to where we work.

Overview

We're looking for experienced Security Engineers to join our fast moving security team. We work on a range of interesting and challenging problems, from supporting thousands of concurrent shoppers and processing millions of data points in real time, to developing and enhancing internal tools, addressing vulnerabilities and managing secrets.

Our goal is to run the world's most trusted and secure delivery platform. We work across all layers of our infrastructure to ensure we deploy trustworthy systems and protect our customers’, shoppers’, and partners’ data.

About the Team

You will be a key member of the Security Engineering team that is responsible for developing security-focused features and frameworks for Instacart in both production and infrastructure space. Ideally a hybrid builder/breaker, you will have an opportunity to lead high impactful projects across the platform and assist in defining the internal team processes. You will be directly influencing the security posture of many products and systems across the company.

About the Job

Design, implement and ship high-quality security features for the product and internal tools across Instacart with a strong sense of urgency and accountability such as:

Secrets & Vulnerability management
IAM and Zero Trust
Platform abuse prevention & mitigation
Data analytics hardening

Work closely with product managers, designers, data scientists, and peer engineering teams to define project requirements and execution plans.

Identify unaddressed areas of security weakness and help the teams come up with efficient and scalable solutions.

Provide software engineering resource for sister teams in the areas of infrastructure hardening, detection, and response

Participate in the team’s on-call by handling and running security incidents

About You

MINIMUM QUALIFICATIONS

5+ years of experience in Security Engineering or related role

Strong knowledge of common back-end web technologies (such as Ruby on Rails, Python, Golang, SQL, etc.) in a large scale distributed system environment

Experience with threat modeling, security assessments, product security concepts, and security architecture reviews

An ability to make data-driven decisions & prioritize initiatives that improve key security metrics

An ability to balance a sense of urgency with shipping high-quality and pragmatic solutions.

Strong self-management and organizational skills

Experience developing tools and automation using common devops toolsets and programming languages

PREFERRED QUALIFICATIONS

Bachelor’s degree in Computer Science, Engineering, Math or related work experience

In depth knowledge on the best remediation techniques for different application vulnerabilities and the ability to explain them to product teams

An ability to create written work products and detailed technical documents to work effectively with cross functional teams and drive alignment on security objectives and plans.

Breaker experience, such as web/application penetration testing

Experience working with highly ephemeral environments

A security-related or architecture-related certification such as CISSP, OSCP, CEH

Last updated: 7 hours ago