Staff Product Security Engineer

We're transforming the grocery industry

At Instacart, we invite the world to share love through food because we believe everyone should have access to the food they love and more time to enjoy it together. Where others see a simple need for grocery delivery, we see exciting complexity and endless opportunity to serve the varied needs of our community. We work to deliver an essential service that customers rely on to get their groceries and household goods, while also offering safe and flexible earnings opportunities to Instacart Personal Shoppers.

Instacart has become a lifeline for millions of people, and we’re building the team to help push our shopping cart forward. If you’re ready to do the best work of your life, come join our table.

Instacart is a Flex First team

There’s no one-size fits all approach to how we do our best work. Our employees have the flexibility to choose where they do their best work—whether it’s from home, an office, or your favorite coffee shop—while staying connected and building community through regular in-person events. Learn more about our flexible approach to where we work.

About the Role - As a Staff Product Security Engineer, you will play a leadership role in strengthening Instacart’s platform security. You’ll design and implement security programs that protect customer and company assets at scale. You will provide technical leadership to multiple projects across different subdomains, ensuring scalability and execution..

About the Team - The Security Engineering team is dedicated to safeguarding Instacart’s products and systems. We believe in balancing robust security with productivity by building innovative tools and fostering collaboration. The team values inclusivity, growth, and continuous learning.

• Lead the Scalable Threat Modeling Program for Instacart’s products
• Lead offensive security and integrate security testing Share security expertise with engineering and product teams, integrating security within the software development lifecycle.
• Innovate w/ AI upon DevSecOps tooling - SAST, DAST, Secret Management, SCA, etc
• Build and enforce secure patterns upon product designs and architecture
• Champion a culture of excellence within the security team through mentorship and leadership.

Minimum Qualifications

• 10+ years of experience in Security Engineering or Software Engineering, with a strong focus on product security.
• Expertise in modern web technologies such as Ruby, Go, and Pythonin large-scale systems.
• Proven experience driving cross-team security initiatives and influencing engineering culture.
• Strong knowledge of mobile security, cloud/container security, or AI security
• Strong knowledge of risk mitigation, security automation, and secure software design principles.
• Solid organizational and prioritization skills to lead complex, high-impact projects.

Preferred Qualifications

• Bachelor’s or Master’s degree in Computer Science, Engineering, or a related field.
• Expertise in vulnerability remediation and application penetration testing (breaker skills).
• Familiarity with ephemeral cloud environments and DevOps workflows.
• Security certifications like OSCP, or CEH.