Senior Product Security Engineer II

EngineersOfAI; United States; Hybrid; USD 130,000 - 170,000; Full time

Job summary

EngineersOfAI is looking for a skilled Security Engineer to join their Security Engineering team. This role involves designing and conducting offensive security operations for Instacart products, deploying security tools and collaborating with various teams to integrate security testing.

The ideal candidate has over 7 years of experience in Security Engineering or Penetration Testing, with expertise in mobile app and AI security testing. A collaborative approach and strong documentation skills are essential.

Qualifications

• 7+ years in Security Engineering or Penetration Testing.
• Experience in mobile app, AI, or cloud penetration testing.
• Knowledge of remediation techniques for application vulnerabilities.

Responsibilities

• Design and conduct offensive security operations for products.
• Integrate security testing into the SDLC cycle.
• Collaborate with cross-functional teams on security objectives.

Skills

Security Engineering

Penetration Testing

Mobile App Security

AI Security Testing

Cloud Security

Threat Modeling

Security Assessments

Technical Documentation

Education

Bachelor’s degree in Computer Science, Engineering, Math

Job description

Overview

About the Role - You will be a key member of the Security Engineering team that is tasked with researching, developing, and conducting offensive security techniques for a suite of Instacart products. We are looking for a breaker mindset security engineer who can scale out the discovery of security defects and anti‑patterns to mature the security posture of Instacart product lines.

About the Team - The security team at Instacart is tasked with ensuring the security and privacy of Instacart’s suite of products and the company as a whole. We believe that with the right mixture of tools and engineering prowess, we can secure our most important assets without negatively impacting productivity. We pride ourselves on fostering a collaborative and inclusive environment where continuous learning and growth are encouraged.

About the Job

Design and conduct offensive security operations / engagements for product and internal tools across Instacart. Deploy and operationalize a variety of open‑source and commercially available security tools that can scale out and be maintained long term. Collaborate with cross‑functional teams, including engineering and product, to integrate security testing into their SDLC cycle. Share knowledge and mentor other team members, promoting a culture of continuous learning and growth.

Minimum Qualifications

• 7+ years of experience in Security Engineering or Penetration Testing, demonstrating a strong grasp of product security concepts and principles
• Experience in mobile app penetration testing, AI security testing or cloud penetration testing
• Experience with threat modeling, security assessments, product security concepts, and security architecture reviews
• An ability to make data‑driven decisions & prioritize initiatives that improve key security metrics
• An ability to balance a sense of urgency with shipping high-quality and pragmatic solutions
• Solid self‑management and organizational skills
• In-depth knowledge of the best remediation techniques for different application vulnerabilities and the ability to explain them to product teams
• An ability to create written work products and detailed technical documents to work effectively with cross‑functional teams and drive alignment on security objectives and plans.

Preferred Qualifications

• Bachelor’s degree in Computer Science, Engineering, Math, or related work experience
• Bug bounty research experience