Senior Security Engineer

Bready* to make a change?

Toast is driven by building the restaurant platform that helps restaurants adapt, take control, and get back to what they do best: building the businesses they love. Toast is looking for a Senior Security Operations Engineer to join our security team. You’ll work in tandem with our engineering teams to think about and act on security challenges throughout all phases of software development, as well as help design and build new features to enhance the security of the Toast platform. You will have a major impact on the overall direction of security at Toast as the team works to design and implement new approaches to application security. We love security innovators who stay informed about emerging threats and are always thinking about new and interesting solutions to match them.

About this roll* (Responsibilities)

- Lead security response efforts raised from the remainder of the company, escalating as necessary
- Creating tools and processes to monitor, detect, and mitigate risks discovered
- Work with fellow security team members to influence the company to help architect positive security changes
- Identify anomalies generated by monitoring solutions within the environment
- Create signatures and tools to analyze and detect malicious activity within AWS and corporate environments
- Leverage EDR solution to respond to suspicious/malicious activity and continuously baseline solution
- Lead or contribute to threat hunting efforts
- Leverage programming languages to solve problems and automate solutions to security findings
- Foster a security mindset with our development teams by working with security champions

Do you have the right ingredients*? (Requirements)

- Previous experience in a security engineering role is essential
- Experience with programming or scripting languages
- Experience leveraging programming languages to solve problems and automate solutions
- Strong understanding of Amazon Web Services(AWS) cloud application architecture and best security practices
- Familiarity with penetration testing tools
- Understanding of Red team/Blue team activities
- Experience with threat modelling/incident response and tabletop exercises
- Experience with Splunk as a centralized logging service and SIEM

**This is a hybrid position and requires two days in the office per week**

Our Spread* of Total Rewards
We strive to provide competitive compensation and benefits programs that help to attract, retain, and motivate the best and brightest people in our industry. Our total rewards package goes beyond great earnings potential and provides the means to a healthy lifestyle with the flexibility to meet Toasters’ changing needs. Learn more about our benefits at https://careers.toasttab.com/toast-benefits.

*Bread puns encouraged but not required