Senior Security Engineer, Instacart

Infrastructure

$166-210k

The base pay range for a successful candidate is dependent on their permanent work location

AWS

TypeScript

GCP

Python

Terraform

Senior and Expert level

Remote from US

Online grocery marketplace and grocery tech platform

Open for applications

Online grocery marketplace and grocery tech platform

1001+ employees

B2CB2BArtificial IntelligenceEnterpriseMarketplaceFoodAnalyticsComputer VisionSaaSMobileAdvertisingDelivery

Open for applications

$166-210k

The base pay range for a successful candidate is dependent on their permanent work location

AWS

TypeScript

GCP

Python

Terraform

Senior and Expert level

Remote from US

1001+ employees

B2CB2BArtificial IntelligenceEnterpriseMarketplaceFoodAnalyticsComputer VisionSaaSMobileAdvertisingDelivery

Company mission

To create a world where everyone has access to the food they love and have more time to enjoy it together.

Job

Company

Role

Who you are

5+ years in security engineering, with depth in at least two of: cloud security (AWS/GCP), identity & access engineering, vulnerability management at scale, or secure infrastructure platform engineering
3+ years of experience performing code reviews and design reviews
Proficiency in Python or TypeScript sufficient to build and maintain internal services (APIs, scanners, dashboards) — not just glue scripts
Working knowledge of cloud IAM (roles, trust policies, federation, SCPs/org policies) and the attack paths it enables when misconfigured
Hands-on Infrastructure-as-Code experience (Terraform, CloudFormation, or equivalent)
Experience driving a remediation program end-to-end: discovery → ownership routing → fix → measurement → prevention
Understanding of SaaS architectures, common risks, and threat models
Experience with Variant Analysis, Root Cause Analysis, or Secure Frameworks

Desirable

Track record of security research, competitive hacking, or OSS contributions
Track record building internal security platforms that other engineers actually adopt — IAM attack-path analysis, vulnerability management, supply-chain/AMI pipelines, secrets management, GRC automation, or similar
Policy-as-code authoring at organization scope (OPA/Rego, Terraform Sentinel/equivalent) with disciplined test coverage and rollout/grandfathering strategies
Cloud Security Posture Management (CSPM) at scale — Wiz/Prisma/equivalent, including remediation programs spanning IaC findings and live threat findings (C2, credential abuse), plus running scan infrastructure across CI fleets
Identity governance experience with a modern IGA stack (ConductorOne, Sailpoint, Veza, or equivalent) including just-in-time access, auto-approval policies, and SoD constraints
Experience securing AI/LLM platforms — model gateways, agent frameworks, MCP servers, prompt injection mitigations — or strong appetite to build that practice from a cloud-security foundation

What the job involves

The CAPS team at Instacart is responsible for securing Cloud infrastructure, AI systems, and Product surfaces. We work closely with all other engineering teams, enabling them to roll out new product features and internal productivity systems in a secure way. Members of the CAPS team assume ownership of security risks and find solutions that mitigate whole classes of vulnerabilities
Identify business-critical risks across Instacart's cloud accounts, identity stack, AI/agent platforms, and product services
Define remediation strategies that scale: prefer guardrails and platform changes over one-off fixes
Build secure-by-default primitives — policy-as-code, paved-road infra modules, identity and access frameworks — that make the safe path the easy path for product teams
Operate the SaaS and internal security platforms that back those guardrails (CSPM, IAM governance, vulnerability management, AMI/image supply chain, secrets, audit) and extend them with internal tooling when off-the-shelf falls short
Lead investigations, root-cause incidents and findings, and drive variant analysis across the codebase to make sure a class of bug is gone — not just one instance
Coach and mentor engineers across security and other functions

Our take

Instacart is an online grocery marketplace that operates a pick-up and delivery system in the US and Canada. Unlike standard grocery shopping, Instacart sends a “personal shopper” to your local store to buy your products, who then delivers them straight to your door on the same day via their own car. The company also supplies the Instacart Platform, with services for stores encompassing eCommerce, fulfilment, in-store, ads, and insights.

The increased modernization of society has meant more than ever that consumers are looking to buy their groceries online, making space for apps like Instacart to become daily life staples for years to come. Although the company must compete with other grocery store delivery services, such as Walmart’s own, it has expanded to cover large percentages of US and Canadian households, and is now aligned with over 2,2000 retail banners in nearly 100,000 stores.

With an expanding partnership with Kroger, Instacart continues to demonstrate why it's a leader in the grocery delivery space. By powering fast, reliable delivery from nearly 2,700 stores and introducing tools like the AI-powered Cart Assistant, Instacart isn't just enhancing the way millions of families shop but also shaping the future of personalized, convenient grocery experiences. This deepening collaboration underscores Instacart's ability to drive growth and deliver value to both customers and partners.

Steph

Company Specialist at Welcome to the Jungle

Insights

Top investors

7% employee growth in 12 months

Glassdoor (3.6)

Company

Funding (last 2 of 15 rounds)

Nov 2021

$232m

LATE VC

Mar 2021

$265m

LATE VC

Total funding: $2.9bn

Company HQ

The East Cut, San Francisco, CA

Leadership

Brandon Leonardo

(Co-Founder)

Interned at Cisco Systems as an IT Engineer. Later became a Senior Web Developer at Webs and then a Venture Hacker at Angel List.

Share this job

View 93 more jobs at Instacart