10 months ago
Base Salary
$161k - $220k/yr
Responsibilities
- Guide and coach the Blue Team across information protection, incident detection and response, and security service delivery.
- Provide strategic and technical oversight for security programs and technically lead security engineers and analysts hunting, detecting, and responding to threats.
- Lead information protection activities including security tool selection, testing, implementation, maintenance, security awareness, provider management, and control testing.
- Oversee vulnerability management, threat hunting, security reviews, incident response, security services, risk assessments, vendor assessments, and PCI and SOC audit support.
- Coordinate detection and response throughout all incident phases, produce accurate incident reports, and improve response controls.
- Monitor, detect, and remediate cloud misconfigurations and security risks while participating in a 24/7 on-call rotation.
- Apply web application and API security principles to protect cloud services and provide actionable risk and vulnerability guidance to product teams.
- Mentor team members, collaborate with customers and partners, and drive security automation and technology improvements.
Requirements
- 5+ years of experience in Security Engineering, Security Operations, or Security Architecture.
- Experience acting as a technical lead for distributed teams consisting largely of remote engineers.
- Experience with PCI-DSS and other compliance and regulatory standards.
- Knowledge of attacker tactics, techniques, procedures, evolving threats, attack patterns, incident response, and cybersecurity standards.
- Experience developing and leading incident response, remediation, and mitigation activities, including investigation and countermeasure implementation.
- Deep understanding of operating system, networking, and application concepts.
- Experience hardening Windows, macOS, Linux containers, and Kubernetes.
- Familiarity with AWS security best practices and Infrastructure-as-Code.
- Experience deploying and maintaining security technologies including access proxies, API gateways, anti-malware, application control, cloud security posture tools, data leak prevention, endpoint detection and response, intrusion detection systems, firewalls, SIEM, vulnerability assessment tools, web proxies, WAFs, and zero-trust controls.
- Ability to work with Product & Engineering, Legal, People & Culture, Finance, GTM teams, external partners, auditors, and customers.
- Ability to work during critical incidents and support coverage requirements.
- CISSP, GCIH, or a similar certification is preferred.
Benefits
- Remote work from anywhere in the U.S. or from Olo’s New York City headquarters, with remote or office choice for employees in the New York City area.
- 20 days of paid time off, 10 sick days, 11 holidays, and year-end closure.
- Health, dental, and vision coverage for employees and families.
- 401(k) match, remote-office stipend, parental leave, volunteer time off, and gift matching policy.
- Participation in a 24/7 on-call rotation.
Tech Stack
Categories
About Olo
Olo builds a SaaS platform for restaurants and other foodservice brands to manage digital ordering, delivery, payments, and guest engagement. It sells cloud software and APIs to integrate menus, POS, and delivery providers across thousands of locations, with tools for catering and order dispatch. Founded in 2005 and headquartered in New York City, it serves restaurant chains and retailers through subscription and transaction-based products.