Senior Incident Commander

Instacart • San Francisco, CA

20h • $182,000 - $230,000 • Remote

About The Position

Instacart is seeking an experienced Senior Incident Commander to join our Security Incident Response team. In this critical role, you'll serve as a key responder and coordinator for security incidents, including data breaches and privacy events. You'll work at the intersection of technical investigation, executive communication, and cross-functional coordination to protect our customers, partners, and business.

Requirements

• 7+ years of hands-on security incident response experience
• Proven track record managing data breaches and security incidents from detection through resolution
• Privacy incident expertise: Direct experience handling privacy incidents, including regulatory notifications and working with Data Protection Authorities
• Executive communication skills: Demonstrated ability to brief C-suite executives and board members during high-pressure situations
• Cross-functional leadership: Experience coordinating with Legal, Communications, Privacy, and other non-technical stakeholders during incidents
• Strong understanding of incident response frameworks (ISO/IEC 27035-2:2023, etc.)
• Knowledge of common attack vectors, TTPs, and threat actor methodologies
• Experience with security tools (SIEM, EDR, forensics platforms)
• Understanding of privacy regulations (GDPR, CCPA, HIPAA, etc.)

Nice To Haves

• Industry certifications such as GCIH, GCFA, GCIA, CISSP, or CISM
• Experience in e-commerce, retail, or marketplace environments
• Background in digital forensics and malware analysis
• Experience with cloud security (AWS, GCP)
• Familiarity with threat intelligence platforms and frameworks (MITRE ATT&CK)

Responsibilities

• Lead Incident Response: Serve as incident commander for security incidents, coordinating response efforts across technical teams, legal, communications, privacy, and executive leadership
• Breach Management: Manage end-to-end breach response activities, including containment, eradication, recovery, and post-incident analysis
• Privacy Incident Handling: Lead privacy-related incidents with expertise in regulatory requirements (GDPR, CCPA, etc.), working closely with Privacy and Legal teams on notification obligations
• Executive Communication: Translate complex technical incidents into clear, actionable briefings for C-level executives and board members
• Stakeholder Coordination: Partner with Legal, Communications, Privacy, Customer Support, and other teams to ensure coordinated incident response
• Process Improvement: Continuously refine incident response playbooks, procedures, and escalation paths based on lessons learned
• Tabletop Exercises: Design and facilitate incident response exercises to maintain team readiness

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed