Senior Corporate Security Engineer
Toast, Inc.Responsibilities
- Own the DLP engineering roadmap and control lifecycle from requirements and architecture through deployment, tuning, operations, and continuous improvement.
- Design and operate data discovery, classification, content inspection, endpoint, cloud, SaaS, and repository protection controls.
- Investigate DLP alerts and incidents, coordinate containment and remediation, reduce false positives, and define effectiveness metrics.
- Engineer and operate scalable SASE capabilities across endpoints, SaaS, private applications, cloud environments, and branch connectivity.
- Configure secure web gateway, CASB, ZTNA, firewall-as-a-service, DNS security, remote browser isolation, DLP, digital experience monitoring, and SD-WAN or SSE integrations.
- Lead migrations from legacy VPN, proxy, and perimeter security solutions while maintaining service continuity and user experience.
- Develop context-aware access and data protection policies, TLS inspection standards, certificate practices, privacy safeguards, and exception processes.
- Monitor availability, latency, tunnel and connector health, troubleshoot endpoint/network/cloud access issues, and design resilient failover and recovery procedures.
- Integrate security controls with SIEM/SOAR, MDM, ticketing, data classification, data security posture management, and response workflows.
- Assess, prioritize, track, and validate vulnerability remediations.
Requirements
- Bachelor's degree in Engineering, Cybersecurity, or equivalent practical experience.
- At least 7 years of experience, including substantial hands-on responsibility in enterprise security engineering environments.
- Hands-on ability to architect, deploy, tune, and operate a major enterprise DLP platform.
- Practical ability to design, implement, migrate, and operate a major SASE or SSE platform, including SWG, CASB, ZTNA, FWaaS, traffic steering, TLS inspection, connectors, and performance management.
- Experience with vulnerability assessment, prioritization, tracking, and remediation validation.
- Programming and automation skills in Python or a comparable language, with working knowledge of REST APIs and automation platforms.
- Excellent communication skills and sound judgment.
- Preferred qualifications include a master's degree in computer science, cybersecurity, information security, or a related discipline.
- Preferred experience includes Splunk, Datadog, Torq, Palo Alto Cortex XSOAR, ServiceNow GRC, Optro, AI-enabled security automation, NIST Cybersecurity Framework, CIS Controls, zero trust principles, and relevant security certifications such as CISSP, CISM, CCSP, Security+, or Network+.
Benefits
- Competitive compensation and benefits programs supporting healthy lifestyles and changing employee needs.
- Hybrid work model with in-person collaboration and region-specific office expectations.
- Accessible and inclusive hiring process with reasonable accommodations available.
About Toast, Inc.
Bottom Line – Solving business problems and generating positive growth is our jam! We are focused on helping purpose-driven brands make a positive impact with predictable Inbound Growth Programs. As a small business, we get it. Growing pains are genuine for many companies in today’s evolving digital landscape. Standing apart from your competition, connecting with your customers, predictably hitting your goals, and scaling are becoming more challenging as local and global markets expand. But it's not impossible. Digging into the unique challenges your business encounters, we analyze every detail and identify opportunities to grow. Our conversational framework is based on data, mixed with beautiful design, story-telling, and smothered in personality to craft marketing and sales strategies that make it all happen. Do you want to transform your company into a crave-worthy brand that new and existing customers will love and promote? Let's Get Cookin'!