Detection Engineer II

📋 Description

• Develop, tune, and maintain detection logic across endpoint, cloud, container, and SaaS.
• Hunt for novel attacker techniques and improve coverage and scale.
• Optimize telemetry ingestion to ensure high-quality data while managing volume and cost.
• Design and build SOAR playbooks and automation workflows for triage and response.
• Mentor teammates on threat hunting methods, detection logic, and investigation techniques.
• Operate with a detection-as-code mindset, versioned and deployed via repeatable pipelines.

🎯 Requirements

• 2+ years in detection engineering, incident response, or offensive security.
• Experience with 1+ public cloud platforms (AWS, Azure, or GCP).
• Deep understanding of attacker TTPs in modern zero-trust environments.
• Proficient in macOS internals and telemetry to identify macOS threats.
• Experience implementing detection-as-code workflows (version control, peer review, automated testing, CI/CD).
• Basic proficiency with Python, Golang, or other scripting languages.

🎁 Benefits

• Flexible remote work with our Flex First approach.
• Competitive compensation and equity grants.
• Additional benefits detailed on Instacart careers pages.