The opportunity
Instacart's Governance, Risk and Compliance (GRC) team sits at the intersection of security, data, and business impact — and we're building an automated, engineering-grade risk program that produces real-time risk scoring, quantified exposure models, and ROI-linked investment…
What you'll do
Build automated signal ingestion pipelines that pull real-time data from: security tooling — normalizing, enriching, and scoring raw findings into actionable, ranked risk intelligence that drives remediation decisions across the organization
Develop probabilistic risk models that express security exposure as: probability distributions, giving leadership a quantified, confidence-backed view of breach likelihood and expected losses — connecting model outputs directly to investment decisions and board-level reporting
Identify systemic choke points across the attack surface: high-leverage remediation paths where a single fix eliminates risk at scale — and prioritize them by expected impact to maximize the efficiency of our security program
Build dashboards and data-driven insights that cascade risk visibility across: security, engineering, and executive stakeholders, translating complex model outputs into language that resonates at every level of the organization
Support risk quantification efforts that express security exposure in: financial terms, connecting model outputs to investment decisions and board-level reporting
+ years of experience in data engineering, with demonstrated ability to write: production-level code in Python and SQL (PostgreSQL, Presto, or SparkSQL) — you write production level code for internal tools and infrastructure
What they're looking for
- + years of experience building and deploying machine learning or: probabilistic models (e.g., Bayesian models) in a production environment
- Experience building data pipelines that ingest real-time or near-real-time: data across multiple formats, handling both stream and batch processing at scale
- Experience with data modeling for classification, normalization, and risk or: anomaly detection signal development
- Experience developing metrics that inform security and business decisions
