Staff Engineer, Cloud Security
Toast, Inc.Base Salary
$151k - $309k/yr
Responsibilities
- Own and operate Toast’s Cloud-Native Application Protection Platform, including tuning, coverage, integrations, and prioritization of findings.
- Lead cloud security posture management across AWS organizations and accounts by defining standards and measuring adherence.
- Drive IAM improvements involving least privilege, role and permission design, and reduction of standing access.
- Secure container environments through image and workload security, cluster configuration, and runtime protection.
- Build guardrails and secure defaults into infrastructure as code and deployment pipelines.
- Perform secure architecture reviews and threat modeling for cloud services and platform capabilities.
- Partner with the SOC on cloud detection coverage, logging, and investigation readiness.
- Improve cloud vulnerability and misconfiguration remediation programs with engineering owners.
- Participate in security incident response and lead cloud investigations and follow-up work.
- Set multi-year cloud security direction, mentor engineers, and influence engineering priorities across teams.
Requirements
- 8+ years of experience in security engineering, infrastructure, or software engineering, with significant time focused on cloud security.
- Deep hands-on experience securing AWS environments at scale, including IAM, Organizations, networking, logging, and core security services.
- Experience deploying and operating CNAPP or CSPM platforms such as Orca, Wiz, or Upwind.
- Experience with container and Kubernetes security, including technologies such as EKS.
- Experience performing threat modeling and security architecture reviews for cloud services and platform capabilities.
- Experience responding to security incidents in cloud environments.
- Proficiency with infrastructure as code such as Terraform and at least one automation programming language such as Python or Go.
- Track record of leading cross-team technical initiatives and influencing engineering teams without direct authority.
- Experience setting technical direction for a security domain and creating multi-year roadmaps.
- Clear written and verbal communication skills for explaining risk and tradeoffs to engineers and leaders.
- Experience with GCP, Azure, or other cloud platforms is preferred.
- Experience with cloud detection engineering or incident response in cloud environments is preferred.
- Familiarity with PCI DSS, SOC 2, or other relevant payments and SaaS compliance frameworks is preferred.
- AWS Certified Security Specialty, CCSP, or another relevant certification is preferred.
- Experience mentoring engineers or growing a security function is preferred.
Benefits
- Hybrid work model with in-office expectations varying by region.
- Toast offers health and lifestyle benefits, equity, and other total rewards programs; compensation details are excluded here.
- AI tools are provided across disciplines to support work, while hiring decisions are made by people.
Categories
About Toast, Inc.
Bottom Line – Solving business problems and generating positive growth is our jam! We are focused on helping purpose-driven brands make a positive impact with predictable Inbound Growth Programs. As a small business, we get it. Growing pains are genuine for many companies in today’s evolving digital landscape. Standing apart from your competition, connecting with your customers, predictably hitting your goals, and scaling are becoming more challenging as local and global markets expand. But it's not impossible. Digging into the unique challenges your business encounters, we analyze every detail and identify opportunities to grow. Our conversational framework is based on data, mixed with beautiful design, story-telling, and smothered in personality to craft marketing and sales strategies that make it all happen. Do you want to transform your company into a crave-worthy brand that new and existing customers will love and promote? Let's Get Cookin'!