Senior Product Security Engineer II
Senior security engineer focused on offensive security testing, penetration testing, and scaling security practices across Instacart's product suite. Requires 7+ years in security engineering or pentesting with experience in mobile, cloud, or AI security.
About the job
Responsibilities
- Design and conduct offensive security operations / engagements for product and internal tools across Instacart
- Deploy and operationalize a variety of open-source and commercially available security tools that can scale out and be maintained long term
- Collaborate with cross-functional teams, including engineering and product, to integrate security testing into their SDLC cycle
- Share knowledge and mentor other team members, promoting a culture of continuous learning and growth
Requirements
- 7+ years of experience in Security Engineering or Penetration Testing, demonstrating a strong grasp of product security concepts and principles
- Experience in mobile app penetration testing, AI security testing or cloud penetration testing
- Experience with threat modeling, security assessments, product security concepts, and security architecture reviews
- Ability to make data-driven decisions & prioritize initiatives that improve key security metrics
- Ability to balance a sense of urgency with shipping high-quality and pragmatic solutions
- Solid self-management and organizational skills
- In-depth knowledge of the best remediation techniques for different application vulnerabilities and the ability to explain them to product teams
- Ability to create written work products and detailed technical documents to work effectively with cross-functional teams and drive alignment on security objectives and plans
Nice-to-Haves
- Bachelor’s degree in Computer Science, Engineering, Math, or related work experience
- Bug bounty research experience
Skills
Penetration Testing, Mobile App Security, Cloud Security, Ai Security, Threat Modeling, Security Architecture, Security Assessments, Sdlc Integration, Vulnerability Remediation, Security Tooling
Similar jobs
Security Engineering jobs
Instacart
United StatesDevelops and operates detection engineering systems across endpoint, cloud, container, and SaaS environments. The role requires at least six years in detection, incident response, or offensive security, strong attacker TTP knowledge, macOS expertise, and detection-as-code experience.
Discord
United States
Senior platform security engineer responsible for building identity and access management systems, Zero Trust architecture, cloud security baselines, and secure developer platforms. Requires 5+ years operating production systems and strong software development and security experience.
Harvey
San Francisco, CA
Build and operate foundational security services covering identity, authorization, secrets, and privileged access for an AI-powered enterprise platform. The role requires 5+ years of production software engineering experience and hands-on security infrastructure expertise.
Front
San Francisco, CA
This role defines, builds, and secures the internal platform supporting Front’s engineering, GTM, data, and AI tooling. It owns AWS and Snowflake infrastructure, paved-road delivery, observability, access controls, vulnerability management, incident response, compliance support, and AI-client security.
Square
United States
Build data pipelines, integrations, policy-as-code, and agentic AI workflows that automate security governance and continuous compliance. The role requires 7+ years of production software engineering experience plus expertise in LLMs, APIs, distributed data, and cloud infrastructure.