Senior Corporate Security Engineer

Overview

The Senior Corporate Security Engineer will help shape and safeguard Instacart’s corporate security, protecting internal systems and sensitive data. You’ll secure internal tools and identity/access management, and proactively detect and mitigate risks across the corporate environment. Working with IT, engineering, and legal, you’ll drive the strategy and implementation of security tools, frameworks, and processes that strengthen our internal security posture.

Our mission is to operate the world’s most trusted and secure grocery delivery platform. We work across every layer of our infrastructure to deploy trustworthy systems and protect our customers’, shoppers’, and partners’ data.

Corporate Security ensures Instacart’s internal networks, corporate assets, and employee workflows are secure, scalable, and resilient. We build proactive, practical security solutions that protect the company while enabling speed and operational efficiency.

You will partner closely across the business to design and deliver end-to-end security solutions:

• Infrastructure Engineering: Embed corporate security controls into engineering workflows by default.
• Corporate Engineering (IT): Prioritize and implement security improvements with minimal impact on employee velocity.
• Subsidiaries: Help establish and maintain best-in-class security within their corporate environments.

About the Job

• Design, deploy, and automate controls that deliver best-in-class security across our corporate environment.
• Be a security partner for our IT-Corporate Engineering team, uplevel their security practices, co-own roadmaps, and ensure security is embedded without slowing velocity.
• Own and manage Instacart’s corporate security roadmap, and work with our detection and response team to ensure controls are monitored.
• Develop and operationalize our vulnerability management program for our corporate network and assets.

About You

Minimum Qualifications

• 7+ years in Information Security with hands-on corporate security experience, including operational monitoring with EDR/XDR and endpoint telemetry (e.g., osquery, CrowdStrike).
• Strong background in corporate security for Zero Trust environments: Okta (SSO/MFA, risk-based policies), Google Workspace administration, BeyondCorp-style device/context-aware access, email security, and DLP.
• Proficiency building tools and automation using common DevOps/SRE stacks (e.g., Python or Go; APIs/Webhooks; Terraform or Ansible; CI/CD).
• Experience with SIEM/SOAR and log pipelines; ability to define detections, alerts, and runbooks in partnership with Detection and Response.
• Experience working with SRE and/or Detection and Response teams.
• Excellent communication skills; proven ability to advocate for security, influence priorities, and drive cross-functional initiatives to completion.

#LI-Remote