Instacart

Detection Engineer II

Rol remoto de Security con fit claro de ubicación del candidato.

PublicadoAgregado recientemente

Países elegibles3 países aceptados

Señal de seniorityNivel abierto

Modelo de trabajoRemoto

Ubicaciones aceptadas para candidatos

CanadáMéxicoEstados Unidos

Resumen del rol

Contenido del rol extraído en secciones para revisar más rápido.

Develop, tune, document, and maintain detection logic across multiple log sources including endpoint, cloud, container, and SaaS products.
Assist in cyber forensic investigations across a variety of log sources
Optimize log ingestion pipelines and telemetry collection to ensure high-quality, actionable security data while managing volume and cost
Design and build SOAR playbooks and automation workflows to streamline detection triage, enrichment, and response actions
Mentor/knowledge share with other detection engineers on threat hunting methodologies, detection logic development, and investigation techniques
2+ years of experience in a detection engineering, incident response, or offensive security role.
Experience with 1 or more public cloud platforms (AWS, Azure, GCP)
Deep understanding of attacker TTPs across modern zero trust environments, including identity compromise, token theft, and abuse of trust boundaries
Proficient understanding of macOS internals and telemetry available to identify macOS specific threats
Experience implementing detection-as-code workflows including version control, peer review processes, automated testing, and CI/CD deployment pipelines
Basic proficiency with Python, Golang, or other programming/scripting languages
Relevant certifications: GCFA, GCFE, GNFA, GREM, OSCP, GCIA, or similar
Background in offensive security or red teaming
Knowledge of machine learning for threat detection

Roles similares