Detection Engineer II

Instacart

Confirmed live today High trust
Remote

Quick summary

Work type
Remote
Location
Remote
Salary
$171,000–$180,500 / yr
Posted
106 days ago
Freshness
Confirmed live today

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $177k
This role $176k
$122k $226k
below market most similar roles pay here above market

This role pays more than 55% of similar roles. Most pay $137,500–$216,250 — the blue band above. At the midpoint, this role pays about $176k versus about $177k for comparable roles.

Based on 240 similar postings.

Employer

About Instacart

Instacart (Maplebear Inc.) is a North American grocery technology company that operates an online marketplace and delivery service connecting customers with personal shoppers who pick and deliver orders from local retailers. It also sells retail e-commerce software and advertising services to grocers and brands.

Instacart currently has 24 open roles on FindRole.

Listed pay typically runs $197,500–$208,500 across 24 roles with salary data.

Most-posted roles

View all roles at Instacart

At a glance

TL;DR · Detection Engineer II

The Detection Engineer II joins the Detection Engineering team within the Security organization to build and operate systems that identify, surface, and respond to threats across a large grocery technology platform. This role involves developing high-fidelity detection logic, hunting for novel attacker techniques, and managing the full detection lifecycle from telemetry collection to automated response. You will develop and maintain detection logic across endpoint, cloud, container, and SaaS products while designing SOAR playbooks and automation workflows. Key requirements include experience with public cloud platforms like AWS, Azure, or GCP, proficiency in Python or Golang, and knowledge of macOS internals. You will utilize a detection-as-code mindset, employing version control and CI/CD pipelines to translate attacker TTPs into durable logic while optimizing log ingestion for high-quality security data.

What you'll do

  • Develop, tune, and maintain detection logic across endpoint, cloud, container, and SaaS log sources.
  • Translate attacker TTPs into durable detection logic and high-fidelity signals.
  • Design and build SOAR playbooks to automate detection triage and response actions.
  • Optimize log ingestion pipelines to ensure high-quality security data while managing volume and cost.
  • Conduct cyber forensic investigations across a variety of diverse log sources.
  • Implement detection-as-code workflows using version control, automated testing, and CI/CD pipelines.
  • Mentor other engineers on threat hunting methodologies and investigation techniques.

What we're looking for

  • 2+ years of experience in a detection engineering, incident response, or offensive security role.
  • Experience with 1 or more public cloud platforms such as AWS, Azure, or GCP.
  • Deep understanding of attacker TTPs across modern zero trust environments.
  • Proficient understanding of macOS internals and telemetry to identify specific threats.
  • Experience implementing detection-as-code workflows including version control, peer review, and CI/CD pipelines.
  • Basic proficiency with Python, Golang, or other programming/scripting languages.
  • Relevant certifications such as GCFA, GCFE, GNFA, GREM, OSCP, GCIA, or similar.
  • Background in offensive security or red teaming (preferred).
  • Knowledge of machine learning for threat detection (preferred).

More like this

Similar roles

Detection Engineer II

Instacart

Remote (Ontario, Canada) +3 106 days ago $145,000–$153,000
Detection-as-Code SOAR Python Golang AWS Azure GCP CI/CD Version Control Threat Hunting Machine Learning macOS Zero Trust TTPs
2+ yrs exp Remote

Detection Engineer

S&P Global

New York, NY 10 days ago $140,000–$155,000
Python PowerShell Bash SQL SPL KQL Splunk Microsoft Sentinel QRadar CrowdStrike SentinelOne Microsoft Defender AWS Azure Google Cloud Git GitLab Azure DevOps CI/CD MITRE ATT&CK Detection-as-Code
5+ yrs exp

Detection Engineer Manager

Capital One Financial

McLean, VA +3 56 days ago
EDR Python SQL SIEM CI/CD GitHub YAML Databricks Apache Spark Machine Learning MITRE ATT&CK CrowdStrike Falcon SentinelOne Microsoft Defender Windows Event Logs Sysmon Linux macOS Detection-as-Code
4+ yrs exp

Detection Engineer, Protective Services

DoorDash, Inc

Remote 38 days ago $130,600–$192,000
Python Go SQL Snowflake Google SecOps Cortex Machine Learning LLM Source Control MITRE ATT&CK D3FEND OSINT Data Pipelines Detection Engineering Threat Hunting Incident Response
3+ yrs exp Remote

Senior Detection Engineer

DoorDash, Inc

Remote 77 days ago $159,800–$235,000
Detection Engineering Python Go SQL SPL KQL Snowflake Google SecOps Cortex MITRE ATT&CK D3FEND Detection-as-Code Threat Intelligence Risk-based Analytics Distributed Systems
7+ yrs exp Remote

Detection Engineering Technical Leader

Cisco

Remote (Denver, CO) +15 31 days ago $150,500–$190,800
Splunk SPL Python AI ML AWS GCP Azure Git GitHub GitLab Bitbucket CI/CD CloudTrail Azure Monitor Detection Engineering Threat Intelligence ATT&CK
8+ yrs exp Remote