Remote Senior Detection Engineer II – Threat Hunting & SOAR

EngineersOfAI; Canada; Híbrido; CAD 181 000 - 250 000; Tempo integral

Resumo da oferta

Instacart is seeking a Senior Detection Engineer II to join our Detection Engineering team, part of Security. You will architect high-fidelity detection logic across endpoint, cloud, container, and SaaS to surface threats in a scalable way.

Collaborate with Engineering, Red Team, Incident Response, Fraud, and Trust & Safety to translate attacker techniques into durable coverage, design SOAR playbooks, and mentor junior engineers in threat hunting and automation.

Qualificações

• 6+ years of experience in detection engineering, incident response, or offensive security.
• Experience with 1+ public cloud platforms (AWS/Azure/GCP).
• Deep understanding of attacker TTPs and zero-trust environments.
• Proficient understanding of macOS internals and related telemetry.
• Experience implementing detection-as-code workflows (version control, automated testing, CI/CD).
• Basic proficiency with Python, Golang, or similar languages.
• Certifications: GCFA, GCFE, GNFA, GREM, OSCP, GCIA or similar.

Responsabilidades

• Develop, tune, document, and maintain detection logic across endpoint, cloud, container, and SaaS sources.
• Assist in cyber forensic investigations across log sources.
• Optimize log ingestion pipelines and telemetry collection for high-quality data while managing volume and cost.
• Design and build SOAR playbooks and automation workflows for detection triage and response.
• Mentor junior analysts and detection engineers on threat hunting and investigation techniques.

Conhecimentos

Detection engineering experience

Incident response

Offensive security

Public cloud platforms

Attacker TTPs knowledge

macOS internals

Detection-as-code workflows

Python / Golang

CI/CD pipelines

Security certifications

Ferramentas

Descrição da oferta de emprego

Instacart is seeking a Senior Detection Engineer II to join our Detection Engineering team, part of Security. You will architect high-fidelity detection logic across endpoint, cloud, container, and SaaS to surface threats in a scalable way.

Collaborate with Engineering, Red Team, Incident Response, Fraud, and Trust & Safety to translate attacker techniques into durable coverage, design SOAR playbooks, and mentor junior engineers in threat hunting and automation.