Remote Senior Product Security Engineer II

CloudDevs; United States; Remote; USD 216,000 - 250,000; Full time

Job summary

Instacart is seeking a seasoned Security Engineer to lead offensive security engagements for our product suite and internal tools. You will deploy scalable security tools, collaborate with engineering and product teams to embed testing into the SDLC, and mentor teammates to foster continuous learning.

The role emphasizes a breaker mindset, strong data-driven decision making, and deep knowledge of remediation techniques for application vulnerabilities.

Qualifications

• 7+ years of experience in Security Engineering or Penetration Testing.
• Experience in mobile app penetration testing or AI security testing or cloud penetration testing.
• Experience with threat modeling, security assessments, product security concepts, and security architecture reviews.
• Ability to make data-driven decisions and prioritize initiatives that improve security metrics.
• Ability to balance urgency with high-quality delivery.
• Strong self-management and organizational skills.
• Knowledge of remediation techniques for vulnerabilities and ability to explain them to product teams.
• Ability to create written work products and detailed technical documents for cross-functional teams.

Responsibilities

• Design and conduct offensive security operations for product and internal tools across Instacart.
• Deploy and operationalize open-source and commercial security tools at scale.
• Collaborate with engineering and product teams to integrate security testing into the SDLC.
• Share knowledge and mentor team members to promote continuous learning.

Skills

Penetration testing

Threat modeling

Security architecture reviews

Offensive security operations

Mentoring teammates

Education

Bachelor’s degree in Computer Science, Engineering, Math, or related field

Job description

Instacart is seeking a seasoned Security Engineer to lead offensive security engagements for our product suite and internal tools. You will deploy scalable security tools, collaborate with engineering and product teams to embed testing into the SDLC, and mentor teammates to foster continuous learning.

The role emphasizes a breaker mindset, strong data-driven decision making, and deep knowledge of remediation techniques for application vulnerabilities.