Senior Incident Commander

<div class="content-intro"><p><strong>We're transforming the grocery industry</strong></p> <p><span class="im">At Instacart, we invite the world to share love through food because we believe everyone should have access to the food they love and more time to enjoy it together. Where others see a simple need for grocery delivery, we see exciting complexity and endless opportunity to serve the varied needs of our community. We work to deliver an essential service that customers rely on to get their groceries and household goods, while also offering safe and flexible earnings opportunities to Instacart Personal Shoppers.</span></p> <p>Instacart has become a lifeline for millions of people, and we’re building the team to help push our shopping cart forward. If you’re ready to do the best work of your life, come join our table.</p> <p><strong>Instacart is a Flex First team </strong></p> <p>There’s no one-size fits all approach to how we do our best work. Our employees have the flexibility to choose where they do their best work—whether it’s from home, an office, or your favorite coffee shop—while staying connected and building community through regular in-person events. <a href="https://instacart.careers/remote/" target="_blank" data-saferedirecturl="https://www.google.com/url?q=https://instacart.careers/remote/source=gmailust=1651869232122000usg=AOvVaw37OlxP8hAKN7nq4YwHQH7e">Learn more about our flexible approach to where we work.</a></p></div><h2> </h2> <h2>Overview</h2> <p>Instacart is seeking an experienced Senior Incident Commander to join our Security Incident Response team. In this critical role, you'll serve as a key responder and coordinator for security incidents, including data breaches and privacy events. You'll work at the intersection of technical investigation, executive communication, and cross-functional coordination to protect our customers, partners, and business.</p> <h2> </h2> <h2>About the Job</h2> <ul> <li>Lead Incident Response: Serve as incident commander for security incidents, coordinating response efforts across technical teams, legal, communications, privacy, and executive leadership</li> <li>Breach Management: Manage end-to-end breach response activities, including containment, eradication, recovery, and post-incident analysis</li> <li>Privacy Incident Handling: Lead privacy-related incidents with expertise in regulatory requirements (GDPR, CCPA, etc.), working closely with Privacy and Legal teams on notification obligations</li> <li>Executive Communication: Translate complex technical incidents into clear, actionable briefings for C-level executives and board members</li> <li>Stakeholder Coordination: Partner with Legal, Communications, Privacy, Customer Support, and other teams to ensure coordinated incident response</li> <li>Process Improvement: Continuously refine incident response playbooks, procedures, and escalation paths based on lessons learned</li> <li>Tabletop Exercises: Design and facilitate incident response exercises to maintain team readiness</li> </ul> <h2> </h2> <h2>About You</h2> <p>Minimum Qualifications</p> <ul> <li>7+ years of hands-on security incident response experience</li> <li>Proven track record managing data breaches and security incidents from detection through resolution</li> <li>Privacy incident expertise: Direct experience handling privacy incidents, including regulatory notifications and working with Data Protection Authorities</li> <li>Executive communication skills: Demonstrated ability to brief C-suite executives and board members during high-pressure situations</li> <li>Cross-functional leadership: Experience coordinating with Legal, Communications, Privacy, and other non-technical stakeholders during incidents</li> <li>Strong understanding of incident response frameworks (ISO/IEC 27035-2:2023, etc.)</li> <li>Knowledge of common attack vectors, TTPs, and threat actor methodologies</li> <li>Experience with security tools (SIEM, EDR, forensics platforms)</li> <li>Under ... (truncated, view full listing at source)