RiseMe
LoginSign Up
Instacart logo
Instacart Verified
E-commerce, Food Delivery, Technology

Senior Security Engineer, Cloud, AI, Product Security

CanadaRemoteFull TimeSeniorCA$196,000–CA$207,000 /yrPosted 1 month ago

Is this role right for you?

Upload your resume and get a skill-by-skill breakdown — see exactly where you match, where you're close, and what to highlight. Not a mystery percentage.

Get a tailored resume highlighting what this role needs.

Role summary

Instacart's CAPS team is seeking a Senior Security Engineer II to secure cloud infrastructure, AI systems, and product surfaces. This role involves identifying and analyzing business-critical risks, defining remediation strategies with actionable roadmaps, and developing scalable systems to promote secure engineering practices. The engineer will own and drive systemic improvements across functions and mentor other engineers. The position requires 5+ years of experience in Security Engineering or Offensive Security, 3+ years in code and design reviews, knowledge of security bug classes, understanding of SaaS architectures and threat models, and experience with Variant Analysis, Root Cause Analysis, or Secure Frameworks. This is a remote role.

We're transforming the grocery industry

At Instacart, we invite the world to share love through food because we believe everyone should have access to the food they love and more time to enjoy it together. Where others see a simple need for grocery delivery, we see exciting complexity and endless opportunity to serve the varied needs of our community. We work to deliver an essential service that customers rely on to get their groceries and household goods, while also offering safe and flexible earnings opportunities to Instacart Personal Shoppers.

Instacart has become a lifeline for millions of people, and we’re building the team to help push our shopping cart forward. If you’re ready to do the best work of your life, come join our table.

Instacart is a Flex First team

There’s no one-size fits all approach to how we do our best work. Our employees have the flexibility to choose where they do their best work—whether it’s from home, an office, or your favorite coffee shop—while staying connected and building community through regular in-person events. Learn more about our flexible approach to where we work.

Overview

The CAPS team at Instacart is responsible for securing Cloud infrastructure, AI systems, and Product surfaces. We work closely with all other engineering teams, enabling them to roll out new product features and internal productivity systems in a secure way. Members of the CAPS team assume ownership of security risks and find solutions that mitigate whole classes of vulnerabilities.

About the Job

  • Identify business-critical risks present within Instacart’s product and infrastructure.
  • Analyze the risks and define remediation strategies with actionable roadmaps.
  • Develop scalable systems to enable and encourage secure engineering patterns.
  • Own and drive systemic improvements across engineering and other functions.
  • Coach and mentor other engineers within the organization.

    • About You

    Minimum Qualifications

  • 5+ years of experience in Security Engineering or Offensive Security roles.
  • 3+ years of experience performing code reviews and design reviews.
  • Proficiency in at least one production language (Python, Go, or TypeScript) sufficient to build internal tooling.
  • Hands-on Infrastructure-as-Code experience (Terraform, CloudFormation, or equivalent).
  • Knowledge of security bug classes and best practice remediation techniques.
  • Understanding of SaaS architectures, common risks, and threat models.
  • Experience with Variant Analysis, Root Cause Analysis, or Secure Frameworks.

    • Preferred Qualifications

  • Track record of security research, competitive hacking, or OSS contributions.
  • Policy-as-code authoring at organization scope (OPA/Rego, Terraform Sentinel/equivalent) with disciplined test coverage and rollout/grandfathering strategies.
  • Cloud Security Posture Management (CSPM) at scale — Wiz/Prisma/equivalent, including remediation programs spanning IaC findings and live threat findings (C2, credential abuse), plus running scan infrastructure across CI fleets.

    • #LI-Remote

    Instacart provides highly market-competitive compensation and benefits in each location where our employees work. This role is remote and the base pay range for a successful candidate is dependent on their permanent work location. Please review our Flex First remote work policy here. Currently, we are only hiring in the following provinces: Ontario, Alberta, British Columbia, and Nova Scotia.

    Offers may vary based on many factors, such as candidate experience and skills required for the role. Additionally, this role is eligible for a new hire equity grant as well as annual refresh grants. Please read more about our benefits offerings here.

    For Canadian based candidates, the base pay ranges for a successful candidate are listed below.

    CAN
    $196,000—$207,000 CAD
    Ready to apply?
    You'll be redirected to Instacart's application page.

    Similar roles