Security Incident Manager

We're transforming the grocery industry At Instacart, we invite the world to share love through food because we believe everyone should have access to the food they love and more time to enjoy it together. Where others see a simple need for grocery delivery, we see exciting complexity and endless opportunity to serve the varied needs of our community. We work to deliver an essential service that customers rely on to get their groceries and household goods, while also offering safe and flexible earnings opportunities to Instacart Personal Shoppers. Instacart has become a lifeline for millions of people, and we’re building the team to help push our shopping cart forward. If you’re ready to do the best work of your life, come join our table. Instacart is a Flex First team There’s no one-size fits all approach to how we do our best work. Our employees have the flexibility to choose where they do their best work—whether it’s from home, an office, or your favorite coffee shop—while staying connected and building community through regular in-person events. Learn more about our flexible approach to where we work. Overview Instacart is seeking experienced Security Incident Response Managers to lead our security investigations to completion. This role will be responsible for owning the end-to-end incident response process, following up on investigations, working with various stakeholders and leading RCA for postmortems. You will play a critical role in protecting Instacart's infrastructure, customer data, and business operations. This is a critical role as we scale our SIRT program. The Security Incident Response team at Instacart plays a pivotal role in safeguarding the company’s infrastructure, customer data, and business operations.

This team operates at the forefront of cybersecurity, managing an AI-enabled Security Operations Center (SOC) and driving proactive threat-hunting initiatives to stay ahead of emerging threats. By collaborating with cross-functional teams, the group ensures robust incident detection, rapid response, and continual improvement of security protocols. The team fosters a culture of excellence, innovation, and collaboration, enabling Instacart to maintain the trust of its users and tackle challenging security scenarios in a dynamic environment. About the Job - Lead security investigation, coordinating cross-functional teams during critical events and conduct post-incident reviews and drive implementation of lessons learned - Partner with Security Engineering, Infrastructure, Product Security, and other teams on security initiatives - Communicate security risks and incidents to executive leadership and stakeholders - Leverage agentic skills to build Incident Management automation for repeated security investigation processes. - Serve on call for your timezone and improve the SIRT program by monitoring metrics About You Minimum Qualifications - 2+ years of experience in a Security Incident Management engineering, incident response, or security TPM role. - Proven track record for accurate and succinct communication skills, attention to detail and journalistic style tracking of investigation. - Proficient in Security domain, industry attack trends, public cloud infrastructure security. - Deep understanding of incident response methodologies (NIST, SANS, etc. ) and frameworks and project management - Proficient in leveraging AI based workflows, automations and incident management tooling. #LI-Remote Instacart provides highly market-competitive compensation and benefits in each location where our employees work. This role is remote and the base pay range for a successful candidate is dependent on their permanent work location. Please review our Flex First remote work policy here . Currently, we are only hiring in the following provinces: Ontario, Alberta, British Columbia, and Nova Scotia.