Senior Product Security Engineer II

Instacart

113d • $187,000 - $250,000

About The Position

At Instacart, we invite the world to share love through food because we believe everyone should have access to the food they love and more time to enjoy it together. Where others see a simple need for grocery delivery, we see exciting complexity and endless opportunity to serve the varied needs of our community. We work to deliver an essential service that customers rely on to get their groceries and household goods, while also offering safe and flexible earnings opportunities to Instacart Personal Shoppers. Instacart has become a lifeline for millions of people, and we’re building the team to help push our shopping cart forward. If you’re ready to do the best work of your life, come join our table. Instacart is a Flex First team. There’s no one-size fits all approach to how we do our best work. Our employees have the flexibility to choose where they do their best work—whether it’s from home, an office, or your favorite coffee shop—while staying connected and building community through regular in-person events. You will be a key member of the Security Engineering team that is tasked with researching, developing, and conducting offensive security techniques for a suite of Instacart products. We are looking for a breaker mindset security engineer who can scale out the discovery of security defects and anti-patterns to mature the security posture of Instacart product lines. The security team at Instacart is tasked with ensuring the security and privacy of Instacart’s suite of products and the company as a whole. We believe that with the right mixture of tools and engineering prowess, we can secure our most important assets without negatively impacting productivity. We pride ourselves on fostering a collaborative and inclusive environment where continuous learning and growth are encouraged.

Requirements

• 7+ years of experience in Security Engineering or Penetration Testing, demonstrating a strong grasp of product security concepts and principles.
• Experience in mobile app penetration testing or AI security testing or cloud penetration testing.
• Experience with threat modeling, security assessments, product security concepts, and security architecture reviews.
• An ability to make data-driven decisions & prioritize initiatives that improve key security metrics.
• An ability to balance a sense of urgency with shipping high-quality and pragmatic solutions.
• Solid self-management and organizational skills.
• In-depth knowledge of the best remediation techniques for different application vulnerabilities and the ability to explain them to product teams.
• An ability to create written work products and detailed technical documents to work effectively with cross-functional teams and drive alignment on security objectives and plans.

Nice To Haves

• Bachelor’s degree in Computer Science, Engineering, Math, or related work experience.
• Bug bounty research experience.

Responsibilities

• Design and conduct offensive security operations / engagements for product and internal tools across Instacart.
• Deploy and operationalize a variety of open-source and commercially available security tools that can scale out and be maintained long term.
• Collaborate with cross-functional teams, including engineering and product, to integrate security testing into their SDLC cycle.
• Share knowledge and mentor other team members, promoting a culture of continuous learning and growth.

Benefits

• Highly market-competitive compensation and benefits in each location where our employees work.
• Remote work flexibility under the Flex First remote work policy.
• Eligibility for a new hire equity grant as well as annual refresh grants.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Bachelor's degree
• Number of Employees: 1,001-5,000 employees