Detection Engineer II

Instacart

Confirmed live today High trust
Remote

Quick summary

Work type
Remote
Location
Ontario, CanadaAlberta, CanadaBritish Columbia, CanadaNova Scotia, Canada
Salary
$145,000–$153,000 / yr
Posted
106 days ago
Freshness
Confirmed live today

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $173k
This role $149k
$122k $224k
below market most similar roles pay here above market

This role pays less than 68% of similar roles. Most pay $132,000–$214,138 — the blue band above. At the midpoint, this role pays about $149k versus about $173k for comparable roles.

Based on 240 similar postings.

Employer

About Instacart

Instacart (Maplebear Inc.) is a North American grocery technology company that operates an online marketplace and delivery service connecting customers with personal shoppers who pick and deliver orders from local retailers. It also sells retail e-commerce software and advertising services to grocers and brands.

Instacart currently has 22 open roles on FindRole.

Listed pay typically runs $197,500–$208,500 across 22 roles with salary data.

Most-posted roles

View all roles at Instacart

At a glance

TL;DR · Detection Engineer II

JOB TITLE: Detection Engineer II The Detection Engineer II joins the Detection Engineering team within the Security organization to build and operate systems that identify, surface, and respond to threats across a large grocery technology platform. This role involves developing high-fidelity detection logic, hunting for novel attacker techniques, and managing the full detection lifecycle from telemetry collection to automated response. You will develop and maintain detection logic across endpoint, cloud, container, and SaaS products while designing SOAR playbooks and automation workflows. Key requirements include experience with public cloud platforms like AWS, Azure, or GCP, proficiency in Python or Golang, and knowledge of macOS internals. You will utilize a detection-as-code mindset, employing version control and CI/CD pipelines to translate attacker TTPs into durable logic within a cloud-native environment.

What you'll do

  • Develop, tune, and maintain detection logic across endpoint, cloud, container, and SaaS log sources.
  • Translate attacker TTPs into durable detection logic to identify novel threats.
  • Design and build SOAR playbooks and automation workflows to streamline triage and response.
  • Optimize log ingestion pipelines and telemetry collection to ensure high-quality security data.
  • Conduct cyber forensic investigations across a variety of diverse log sources.
  • Implement detection-as-code workflows using version control, peer reviews, and CI/CD pipelines.
  • Mentor other detection engineers on threat hunting methodologies and investigation techniques.

What we're looking for

  • 2+ years of experience in a detection engineering, incident response, or offensive security role.
  • Experience with 1 or more public cloud platforms such as AWS, Azure, or GCP.
  • Deep understanding of attacker TTPs across modern zero trust environments.
  • Proficient understanding of macOS internals and telemetry to identify specific threats.
  • Experience implementing detection-as-code workflows including version control, peer review, and CI/CD pipelines.
  • Basic proficiency with Python, Golang, or other programming/scripting languages.
  • Relevant certifications such as GCFA, GCFE, GNFA, GREM, OSCP, GCIA, or similar.
  • Background in offensive security or red teaming (preferred).
  • Knowledge of machine learning for threat detection (preferred).

More like this

Similar roles

Detection Engineer II

Instacart

Remote 106 days ago $171,000–$180,500
Detection-as-Code SOAR CI/CD Python Golang AWS Azure GCP MacOS Threat Hunting Version Control Machine Learning
2+ yrs exp Remote

Detection Engineer

S&P Global

New York, NY 11 days ago $140,000–$155,000
Python PowerShell Bash SQL SPL KQL Splunk Microsoft Sentinel QRadar CrowdStrike SentinelOne Microsoft Defender AWS Azure Google Cloud Git GitLab Azure DevOps CI/CD MITRE ATT&CK Detection-as-Code
5+ yrs exp

Detection Engineer, Protective Services

DoorDash, Inc

Remote 39 days ago $130,600–$192,000
Python Go SQL Snowflake Google SecOps Cortex Machine Learning LLM Source Control MITRE ATT&CK D3FEND OSINT Data Pipelines Detection Engineering Threat Hunting Incident Response
3+ yrs exp Remote

Senior Detection Engineer

DoorDash, Inc

Remote 78 days ago $159,800–$235,000
Detection Engineering Python Go SQL SPL KQL Snowflake Google SecOps Cortex MITRE ATT&CK D3FEND Detection-as-Code Threat Intelligence Risk-based Analytics Distributed Systems
7+ yrs exp Remote

Detection Engineer Manager

Capital One Financial

McLean, VA +3 57 days ago
EDR Python SQL SIEM CI/CD GitHub YAML Databricks Apache Spark Machine Learning MITRE ATT&CK CrowdStrike Falcon SentinelOne Microsoft Defender Windows Event Logs Sysmon Linux macOS Detection-as-Code
4+ yrs exp

Security Engineer (Detection Engineering)

SpaceX

Redmond, WA +1 105 days ago $130,000–$155,000
Python Go C++ Rust Kubernetes SIEM ETL Incident Response Linux Windows macOS Automation Security Operations Adversary Emulation Monitoring Alerting