Detection Engineer II

Remote - United Statesfull timeRemote

Apply on Employer Site

mid

$145k–$153k

H1B: yes

Instacart The Detection Engineer II at Instacart develops and maintains detection logic across multiple log sources to identify and respond to security threats. The role involves cyber forensic investigations, optimizing telemetry collection, and building SOAR playbooks to automate detection and response.

Responsibilities

Develop, tune, document, and maintain detection logic across multiple log sources including endpoint, cloud, container, and SaaS products
Assist in cyber forensic investigations across a variety of log sources
Optimize log ingestion pipelines and telemetry collection to ensure high-quality, actionable security data while managing volume and cost
Design and build SOAR playbooks and automation workflows to streamline detection triage, enrichment, and response actions
Mentor/knowledge share with other team members

Qualification

Basic proficiency with PythonRelevant certificationsOffers may vary based on many factorsFor Canadian based candidates$145

Required

2+ years of experience in a detection engineering, incident response, or offensive security role.
Experience with 1 or more public cloud platforms (AWS, Azure, GCP)
Deep understanding of attacker TTPs across modern zero trust environments, including identity compromise, token theft, and abuse of trust boundaries
Proficient understanding of macOS internals and telemetry available to identify macOS specific threats
Experience implementing detection-as-code workflows including version control, peer review processes, automated testing, and CI/CD deployment pipelines
Basic proficiency with Python, Golang, or other programming/scripting languages
Relevant certifications: GCFA, GCFE, GNFA, GREM, OSCP, GCIA, or similar

Preferred

Background in offensive security or red teaming
Knowledge of machine learning for threat detection
Instacart provides highly market-competitive compensation and benefits in each location where our employees work. This role is remote and the base pay range for a successful candidate is dependent on their permanent work location. Please review our Flex First remote work policy here. Currently, we are only hiring in the following provinces: Ontario, Alberta, British Columbia, and Nova Scotia.
Offers may vary based on many factors, such as candidate experience and skills required for the role. Additionally, this role is eligible for a new hire equity grant as well as annual refresh grants. Please read more about our benefits offerings here.
For Canadian based candidates, the base pay ranges for a successful candidate are listed below.
$145,000—$153,000 USD