Security Incident Manager

Title: Security Incident Manager Location: Canada - Remote (ON, AB, BC, or NS Only)

Overview

Instacart is seeking experienced Security Incident Response Managers to lead our security investigations to completion. This role will be responsible for owning the end-to-end incident response process, following up on investigations, working with various stakeholders and leading RCA for postmortems. You will play a critical role in protecting Instacart's infrastructure, customer data, and business operations. This is a critical role as we scale our SIRT program.

The Security Incident Response team at Instacart plays a pivotal role in safeguarding the company’s infrastructure, customer data, and business operations. This team operates at the forefront of cybersecurity, managing an AI-enabled Security Operations Center (SOC) and driving proactive threat-hunting initiatives to stay ahead of emerging threats. By collaborating with cross-functional teams, the group ensures robust incident detection, rapid response, and continual improvement of security protocols. The team fosters a culture of excellence, innovation, and collaboration, enabling Instacart to maintain the trust of its users and tackle challenging security scenarios in a dynamic environment.

About the Job

• Lead security investigation, coordinating cross-functional teams during critical events and conduct post-incident reviews and drive implementation of lessons learned
• Partner with Security Engineering, Infrastructure, Product Security, and other teams on security initiatives
• Communicate security risks and incidents to executive leadership and stakeholders
• Leverage agentic skills to build Incident Management automation for repeated security investigation processes.
• Serve on call for your timezone and improve the SIRT program by monitoring metrics

About You

Minimum Qualifications

• 2+ years of experience in a Security Incident Management engineering, incident response, or security TPM role.
• Proven track record for accurate and succinct communication skills, attention to detail and journalistic style tracking of investigation.
• Proficient in Security domain, industry attack trends, public cloud infrastructure security.
• Deep understanding of incident response methodologies (NIST, SANS, etc.) and frameworks and project management
• Proficient in leveraging AI based workflows, automations and incident management tooling.

#LI-Remote