Senior Product Security Engineer II

Senior Engineering Manager, Privacy Security

Instacart

We're transforming the grocery industry At Instacart, we invite the world to share love through food because we believe everyone should have access to the food they love and more time to enjoy it together. Where others see a simple need for grocery delivery, we see exciting complexity and endless opportunity to serve the varied needs of our community. We work to deliver an essential service that customers rely on to get their groceries and household goods, while also offering safe and flexible earnings opportunities to Instacart Personal Shoppers. Instacart has become a lifeline for millions of people, and we’re building the team to help push our shopping cart forward. If you’re ready to do the best work of your life, come join our table. Instacart is a Flex First team There’s no one-size fits all approach to how we do our best work. Our employees have the flexibility to choose where they do their best work—whether it’s from home, an office, or your favorite coffee shop—while staying connected and building community through regular in-person events. Learn more about our flexible approach to where we work. OVERVIEW We're looking for an experienced Senior Engineering Manager to join our growing Privacy Engineering team within Security Engineering. The Senior Engineering Manager of Privacy Engineering will be primarily responsible for the continued evolution of our privacy capabilities, including access request and deletion processing, annotating and securing sensitive information such as personally identifiable information (PII), and effectively managing third party marketing trackers.  You will lead the Privacy Engineering team in delivering privacy-by-design solutions that provide shared controls, data lifecycle management tooling, and other privacy-enhancing technologies that product teams utilize to embed privacy as a core feature in their products. Your commitment to applying secure privacy capabilities to business and technology challenges in clean & innovative ways will make you a trusted advisor to your partners and their teams. You will own projects and influence our direction and impact the business in tangible, visible ways, always having a seat at the table. ABOUT THE TEAM  The Privacy Engineering team is a platform team in the Security Engineering organization that believes it should be easy to build products that respect our user’s privacy. To do this, we manage our internal data privacy architecture that includes systems to annotate, find, and delete data across production and offline data storage systems. Additionally, we build the front end components that product teams across Instacart use to give our users direct access to these internal systems. The Privacy team is a member of our core Privacy working group, that includes our Legal team, Compliance team, Operations teams, and privacy partners for each of our main product pillars. Additionally we work closely with our Infrastructure, Data Platform, and Security engineering teams to ensure privacy controls are in place effectively across all levels of our stack. RESPONSIBILITIES * Grow, develop, manage, and lead a multidisciplinary team of seasoned software and system engineers across all aspects of Privacy. * Advise executive and senior technical & business leadership on Instacart’s privacy vision through regular and consistent written and in-person communication. * Lead Privacy Engineering partnership with infrastructure and application teams, to ensure all products are developed and delivered with security and privacy in mind through Privacy by Design. * Implement policies and procedures that protect our customer and partner data. * Develop and provide metrics and reports to the senior leadership of the top privacy and security risks and health of their respective organizations. ABOUT YOU Minimum Qualifications * 12+ years of work experience in privacy engineering delivering holistic Privacy Engineering solutions and building privacy as part of the product. * 5+ years leadership experience of directly managing an org of 5+ senior level individual contributors  * Proven ability to recruit/hire, upskill, lead, and scale teams. Should be able to handle performance management, customer negotiations and drive privacy centric decisions with other partners. * Strong distributed systems and cloud technology knowledge. * Ability to assess cost/benefit trade-offs of privacy initiatives in the context of overall business risk mitigation, and Instacart’s operational objectives.  * Bachelor’s and/or Master’s Degree in Computer Science, or other related science/engineering fields (Mathematics, Engineering, etc.) * Working experience with policies such as GDPR, CCPA, CPRA, etc. * Real-world experience implementing privacy/trust/security measures which have shipped in a consumer product and/or service. #LI-Remote Instacart provides highly market-competitive compensation and benefits in each location where our employees work. This role is remote and the base pay range for a successful candidate is dependent on their permanent work location. Please review our Flex First remote work policy here. Offers may vary based on many factors, such as candidate experience and skills required for the role. Additionally, this role is eligible for a new hire equity grant as well as annual refresh grants. Please read more about our benefits offerings here. For US based candidates, the base pay ranges for a successful candidate are listed below. CA, NY, CT, NJ $265,000—$279,000 USD WA $254,000—$268,000 USD OR, DE, ME, MA, MD, NH, RI, VT, DC, PA, VA, CO, TX, IL, HI $243,000—$256,000 USD All other states $221,000—$233,000 USD

Senior Security Engineer, Infrastructure

Instacart

We're transforming the grocery industry At Instacart, we invite the world to share love through food because we believe everyone should have access to the food they love and more time to enjoy it together. Where others see a simple need for grocery delivery, we see exciting complexity and endless opportunity to serve the varied needs of our community. We work to deliver an essential service that customers rely on to get their groceries and household goods, while also offering safe and flexible earnings opportunities to Instacart Personal Shoppers. Instacart has become a lifeline for millions of people, and we’re building the team to help push our shopping cart forward. If you’re ready to do the best work of your life, come join our table. Instacart is a Flex First team There’s no one-size fits all approach to how we do our best work. Our employees have the flexibility to choose where they do their best work—whether it’s from home, an office, or your favorite coffee shop—while staying connected and building community through regular in-person events. Learn more about our flexible approach to where we work. OVERVIEW The CAPS team at Instacart is responsible for securing Cloud infrastructure, AI systems, and Product surfaces. We work closely with all other engineering teams, enabling them to roll out new product features and internal productivity systems in a secure way. Members of the CAPS team assume ownership of security risks and find solutions that mitigate whole classes of vulnerabilities. ABOUT THE JOB * Identify business-critical risks across Instacart's cloud accounts, identity stack, AI/agent platforms, and product services. * Define remediation strategies that scale: prefer guardrails and platform changes over one-off fixes. * Build secure-by-default primitives — policy-as-code, paved-road infra modules, identity and access frameworks — that make the safe path the easy path for product teams. * Operate the SaaS and internal security platforms that back those guardrails (CSPM, IAM governance, vulnerability management, AMI/image supply chain, secrets, audit) and extend them with internal tooling when off-the-shelf falls short. * Lead investigations, root-cause incidents and findings, and drive variant analysis across the codebase to make sure a class of bug is gone — not just one instance. * Coach and mentor engineers across security and other functions. ABOUT YOU Minimum Qualifications * 5+ years in security engineering, with depth in at least two of: cloud security (AWS/GCP), identity & access engineering, vulnerability management at scale, or secure infrastructure platform engineering. * 3+ years of experience performing code reviews and design reviews. * Proficiency in Python or TypeScript sufficient to build and maintain internal services (APIs, scanners, dashboards) — not just glue scripts. * Working knowledge of cloud IAM (roles, trust policies, federation, SCPs/org policies) and the attack paths it enables when misconfigured. * Hands-on Infrastructure-as-Code experience (Terraform, CloudFormation, or equivalent). * Experience driving a remediation program end-to-end: discovery → ownership routing → fix → measurement → prevention. * Understanding of SaaS architectures, common risks, and threat models. * Experience with Variant Analysis, Root Cause Analysis, or Secure Frameworks. Preferred Qualifications * Track record of security research, competitive hacking, or OSS contributions. * Track record building internal security platforms that other engineers actually adopt — IAM attack-path analysis, vulnerability management, supply-chain/AMI pipelines, secrets management, GRC automation, or similar. * Policy-as-code authoring at organization scope (OPA/Rego, Terraform Sentinel/equivalent) with disciplined test coverage and rollout/grandfathering strategies. * Cloud Security Posture Management (CSPM) at scale — Wiz/Prisma/equivalent, including remediation programs spanning IaC findings and live threat findings (C2, credential abuse), plus running scan infrastructure across CI fleets. * Identity governance experience with a modern IGA stack (ConductorOne, Sailpoint, Veza, or equivalent) including just-in-time access, auto-approval policies, and SoD constraints. * Experience securing AI/LLM platforms — model gateways, agent frameworks, MCP servers, prompt injection mitigations — or strong appetite to build that practice from a cloud-security foundation. Instacart provides highly market-competitive compensation and benefits in each location where our employees work. This role is remote and the base pay range for a successful candidate is dependent on their permanent work location. Please review our Flex First remote work policy here. Offers may vary based on many factors, such as candidate experience and skills required for the role. Additionally, this role is eligible for a new hire equity grant as well as annual refresh grants. Please read more about our benefits offerings here. For US based candidates, the base pay ranges for a successful candidate are listed below. CA, NY, CT, NJ $199,000—$210,000 USD WA $191,000—$201,000 USD OR, DE, ME, MA, MD, NH, RI, VT, DC, PA, VA, CO, TX, IL, HI $183,000—$193,000 USD All other states $166,000—$175,000 USD

Senior Product Security Engineer II

Instacart

We're transforming the grocery industry At Instacart, we invite the world to share love through food because we believe everyone should have access to the food they love and more time to enjoy it together. Where others see a simple need for grocery delivery, we see exciting complexity and endless opportunity to serve the varied needs of our community. We work to deliver an essential service that customers rely on to get their groceries and household goods, while also offering safe and flexible earnings opportunities to Instacart Personal Shoppers. Instacart has become a lifeline for millions of people, and we’re building the team to help push our shopping cart forward. If you’re ready to do the best work of your life, come join our table. Instacart is a Flex First team There’s no one-size fits all approach to how we do our best work. Our employees have the flexibility to choose where they do their best work—whether it’s from home, an office, or your favorite coffee shop—while staying connected and building community through regular in-person events. Learn more about our flexible approach to where we work. OVERVIEW About the Role - You will be a key member of the Security Engineering team that is tasked with researching, developing, and conducting offensive security techniques for a suite of Instacart products. We are looking for a breaker mindset security engineer who can scale out the discovery of security defects and anti-patterns to mature the security posture of Instacart product lines.. About the Team -The security team at Instacart is tasked with ensuring the security and privacy of Instacart’s suite of products and the company as a whole. We believe that with the right mixture of tools and engineering prowess, we can secure our most important assets without negatively impacting productivity. We pride ourselves on fostering a collaborative and inclusive environment where continuous learning and growth are encouraged. ABOUT THE JOB  Design and conduct offensive security operations / engagements for product and internal tools across Instacart. Deploy and operationalize a variety of open-source and commercially available security tools that can scale out and be maintained long term. Collaborate with cross-functional teams, including engineering and product, to integrate security testing into their SDLC cycle. Share knowledge and mentor other team members, promoting a culture of continuous learning and growth.. ABOUT YOU MINIMUM QUALIFICATIONS * 7+ years of experience in Security Engineering or Penetration Testing, demonstrating a strong grasp of product security concepts and principles * Experience in mobile app penetration testing, AI security testing or cloud penetration testing * Experience with threat modeling, security assessments, product security concepts, and security architecture reviews * An ability to make data-driven decisions & prioritize initiatives that improve key security metrics * An ability to balance a sense of urgency with shipping high-quality and pragmatic solutions * Solid self-management and organizational skills * In-depth knowledge of the best remediation techniques for different application vulnerabilities and the ability to explain them to product teams * An ability to create written work products and detailed technical documents to work effectively with cross-functional teams and drive alignment on security objectives and plans. PREFERRED QUALIFICATIONS * Bachelor’s degree in Computer Science, Engineering, Math, or related work experience * Bug bounty research experience  #LI-Remote Instacart provides highly market-competitive compensation and benefits in each location where our employees work. This role is remote and the base pay range for a successful candidate is dependent on their permanent work location. Please review our Flex First remote work policy here. Currently, we are only hiring in the following provinces: Ontario, Alberta, British Columbia, and Nova Scotia. Offers may vary based on many factors, such as candidate experience and skills required for the role. Additionally, this role is eligible for a new hire equity grant as well as annual refresh grants. Please read more about our benefits offerings here. For Canadian based candidates, the base pay ranges for a successful candidate are listed below. CAN $196,000—$207,000 CAD