3 days ago
Remote, CanadaMid Level
Base Salary
$145k - $153k/yr
Responsibilities
- Develop, tune, document, and maintain detection logic across endpoint, cloud, container, and SaaS log sources.
- Assist with cyber forensic investigations across varied log sources.
- Optimize log ingestion pipelines and telemetry collection for actionable security data while managing volume and cost.
- Design and build SOAR playbooks and automation workflows for detection triage, enrichment, and response.
- Mentor and share knowledge with detection engineers on threat hunting, detection logic, and investigation techniques.
Requirements
- At least 2 years of experience in detection engineering, incident response, or offensive security.
- Experience with at least one public cloud platform: AWS, Azure, or GCP.
- Deep understanding of attacker TTPs in modern zero trust environments, including identity compromise, token theft, and abuse of trust boundaries.
- Proficiency with macOS internals and telemetry for identifying macOS-specific threats.
- Experience implementing detection-as-code workflows with version control, peer review, automated testing, and CI/CD deployment pipelines.
- Basic proficiency with Python, Golang, or another programming or scripting language.
- Relevant certifications such as GCFA, GCFE, GNFA, GREM, OSCP, GCIA, or similar.
- Preferred: offensive security or red-team experience.
- Preferred: knowledge of machine learning for threat detection.
Benefits
- Remote, Flex First work arrangement with flexibility to work from home, an office, or another preferred location, plus regular in-person events.
- Currently hiring in Ontario, Alberta, British Columbia, and Nova Scotia.
- Eligible for a new hire equity grant and annual refresh grants.
- Benefits are provided according to Instacart’s offerings and location.
About Instacart
Instacart builds a grocery technology platform used by retailers and consumers for online shopping, delivery, and pickup. Its business spans a consumer marketplace, enterprise e-commerce and fulfillment software, and a retail media ads network, generating revenue from fees, subscriptions, software, and advertising. Founded in 2012 and headquartered in San Francisco, the company is publicly traded on Nasdaq and operates across the U.S. and Canada.