Security Incident Manager

Overview

Instacart is seeking experienced Security Incident Response Managers to lead our security investigations to completion. This role will be responsible for owning the end-to-end incident response process, following up on investigations, working with various stakeholders and leading RCA for postmortems. You will play a critical role in protecting Instacart's infrastructure, customer data, and business operations. This is a critical role as we scale our SIRT program.

The Security Incident Response team at Instacart plays a pivotal role in safeguarding the company’s infrastructure, customer data, and business operations. This team operates at the forefront of cybersecurity, managing an AI-enabled Security Operations Center (SOC) and driving proactive threat-hunting initiatives to stay ahead of emerging threats. By collaborating with cross-functional teams, the group ensures robust incident detection, rapid response, and continual improvement of security protocols. The team fosters a culture of excellence, innovation, and collaboration, enabling Instacart to maintain the trust of its users and tackle challenging security scenarios in a dynamic environment.

About the Job

• Lead security investigation, coordinating cross-functional teams during critical events and conduct post-incident reviews and drive implementation of lessons learned
• Partner with Security Engineering, Infrastructure, Product Security, and other teams on security initiatives
• Communicate security risks and incidents to executive leadership and stakeholders
• Leverage agentic skills to build Incident Management automation for repeated security investigation processes.
• Serve on call for your timezone and improve the SIRT program by monitoring metrics

About You

Minimum Qualifications

• 2+ years of experience in a Security Incident Management engineering, incident response, or security TPM role.
• Proven track record for accurate and succinct communication skills, attention to detail and journalistic style tracking of investigation.
• Proficient in Security domain, industry attack trends, public cloud infrastructure security.
• Deep understanding of incident response methodologies (NIST, SANS, etc.) and frameworks and project management
• Proficient in leveraging AI based workflows, automations and incident management tooling.

#LI-Remote