Security Incident Manager

Instacart is seeking experienced Security Incident Response Managers to lead security investigations to completion. This role will be responsible for owning the end-to-end incident response process, following up on investigations, working with various stakeholders, and leading RCA for postmortems.

You will play a critical role in protecting Instacart's infrastructure, customer data, and business operations. This is a critical role as we scale our SIRT program.

The Security Incident Response team at Instacart plays a pivotal role in safeguarding the company’s infrastructure, customer data, and business operations. This team operates at the forefront of cybersecurity, managing an AI-enabled Security Operations Center (SOC) and driving proactive threat-hunting initiatives to stay ahead of emerging threats.

Responsibilities

• Lead security investigations, coordinating cross-functional teams during critical events
• Conduct post-incident reviews and drive implementation of lessons learned
• Partner with Security Engineering, Infrastructure, Product Security, and other teams on security initiatives
• Communicate security risks and incidents to executive leadership and stakeholders
• Leverage technical skills to build Incident Management automation for repeated security investigation processes
• Serve on call for your timezone and improve the SIRT program by monitoring metrics

Requirements

• 2+ years of experience in a Security Incident Management engineering, incident response, or security TPM role
• Proven track record for accurate and succinct communication skills, attention to detail, and journalistic-style tracking of investigation
• Proficient in Security domain, industry attack trends, public cloud infrastructure security
• Deep understanding of incident response methodologies (NIST, SANS, etc.) and frameworks, and project management
• Proficient in leveraging AI-based workflows, automations, and incident management tooling