Senior Risk & Compliance Engineer - Data

Instacart Instacart · Consumer · United States · Remote · Security

Instacart is seeking a Senior Risk & Compliance Engineer to build an automated, engineering-grade risk program. This role involves writing production-level code, building signal ingestion pipelines, and developing probabilistic risk models to provide a quantified view of the company's risk posture. The goal is to transform a manual risk discipline into a data-driven, automated program.

What you'd actually do

  1. Build automated signal ingestion pipelines that pull real-time data from security tooling — normalizing, enriching, and scoring raw findings into actionable, ranked risk intelligence that drives remediation decisions across the organization
  2. Develop probabilistic risk models that express security exposure as probability distributions, giving leadership a quantified, confidence-backed view of breach likelihood and expected losses — connecting model outputs directly to investment decisions and board-level reporting
  3. Identify systemic choke points across the attack surface — high-leverage remediation paths where a single fix eliminates risk at scale — and prioritize them by expected impact to maximize the efficiency of our security program
  4. Build dashboards and data-driven insights that cascade risk visibility across security, engineering, and executive stakeholders, translating complex model outputs into language that resonates at every level of the organization
  5. Support risk quantification efforts that express security exposure in financial terms, connecting model outputs to investment decisions and board-level reporting

Skills

Required

  • 5+ years of experience in data engineering
  • demonstrated ability to write production-level code in Python and SQL (PostgreSQL, Presto, or SparkSQL)
  • 3+ years of experience building and deploying machine learning or probabilistic models (e.g., Bayesian models) in a production environment
  • Experience building data pipelines that ingest real-time or near-real-time data across multiple formats, handling both stream and batch processing at scale
  • Experience with data modeling for classification, normalization, and risk or anomaly detection signal development
  • Experience developing metrics that inform security and business decisions

Nice to have

  • Familiarity with security risk concepts including threat intelligence enrichment pipelines, EPSS, or CISA KEV
  • Familiarity with quantitative risk frameworks such as FAIR
  • Exposure to security frameworks such as NIST CSF, SOC 2
  • Demonstrated ability to translate risk model outputs into executive or board-level narratives
  • A genuine passion for building systems that protect customers and products, and a track record of operating effectively in fast-paced, ambiguous environments where the program is still being shaped

What the JD emphasized

  • production-level code
  • probabilistic risk models
  • real-time data
  • risk quantification

Other signals

  • production-level code
  • probabilistic risk models
  • real-time risk scoring
  • data pipelines