Staff Infrastructure Security Engineer

Overview

About the Role

We're looking for an experienced Staff Infrastructure Security Engineer to join our fast moving team. We work on a range of interesting and challenging problems, from supporting thousands of concurrent shoppers and processing millions of data points in real time, to determining the best route for deliveries and predicting store inventory levels.

About the Team

At Instacart, we hold ourselves greatly responsible for protecting our customers', shoppers', partners' data and provide a secure platform to shop. As one of the key members of the security team, you will have a tremendous impact on Instacart's security posture and engineering culture. This is a great opportunity for someone who wants to have a large sense of ownership, grow extraordinarily in their career, develop cross-functional technical and soft skills, in not just security, but engineering overall. Our platform is complex, rapidly scaling and processing millions of transactions in real-time, all of the time.

About the Job

• Drive and improve the security posture of our cloud infrastructure AWS & GCP environment.
• Build and deploy tools and services to automate enforcement of security baseline across our cloud infrastructure, including:
• IAM and configuration management
• Container and system security and vulnerability management
• PKI and secret management
• Partner with our incident response team to design and implement detection and response capability on our cloud Infrastructure
• Work closely with IT to harden and secure our corporate and endpoint infrastructure
• Provide advisory and consulting service to engineering, product and IT teams to ensure their services are built with security in mind
• Participate in the team’s on-call rotation and help drive critical infrastructure incidents to resolution

About You

Minimum Qualifications: 

• Expertise in Cloud Infrastructure Security (AWS is a MUST with GCP or Azure strongly desirable)
• Strong experience in one or more of the following languages: Python, Ruby, Go, Shell and regularly commit code or contribute to open source projects
• Experience working with containerized environments and related orchestrations techniques (Docker and/or Kubernetes)
• Experience scaling infrastructure with code or deploying Terraform
• Functional understanding of distributed systems and service oriented architectures
• Strong system and networking fundamentals such as TCP/IP, kernel operations, memory and file system management, particularly on linux platforms
• Enjoy working collaboratively with internal customers and stakeholders and can navigate security/productivity trade-offs

Preferred Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering or equivalent work experience
• Knowledge of common attack patterns/TTP as well as hardening strategies for ONE or more of the following systems:
• Windows/AzureAD
• Linux
• OSX

#LI-Remote