Senior Corporate Security Engineer
Toast, Inc.Responsibilities
- Own the DLP engineering roadmap and control lifecycle from requirements and architecture through deployment, tuning, operations, and continuous improvement.
- Design and operate DLP controls across managed endpoints, email, web, network, SaaS, collaboration applications, cloud environments, and data repositories.
- Build data discovery and classification logic using sensitive information types, regular expressions, data matching, document fingerprinting, OCR, and machine learning where appropriate.
- Investigate DLP alerts and incidents, coordinate containment and remediation, and reduce false positives without weakening protection.
- Integrate DLP with SASE services, SIEM/SOAR platforms, MDM, ticketing systems, data classification, data security posture management, and response workflows.
- Engineer and operate scalable SASE capabilities for corporate fleets, SaaS, private applications, and cloud environments.
- Configure secure web gateways, CASB, ZTNA, FWaaS, DNS security, remote browser isolation, DLP, digital experience monitoring, and SD-WAN or SSE integrations.
- Lead migrations from legacy VPN, proxy, and perimeter security solutions while maintaining service continuity and user experience.
- Develop context-aware access and data protection policies using device posture, application risk, destination, data sensitivity, and session risk signals.
- Define TLS inspection, certificate deployment, privacy safeguards, exception processes, observability, failover, recovery procedures, and controlled automation.
- Assess, prioritize, track, and validate vulnerability remediations.
- Partner with IT, Network Engineering, Legal, Privacy, Compliance, and application owners to communicate risk and establish operational controls.
Requirements
- Bachelor's degree in Engineering, Cybersecurity, or equivalent practical experience.
- 7+ years of experience, including substantial hands-on responsibility in enterprise security engineering environments.
- Hands-on ability to architect, deploy, tune, and operate at least one major enterprise DLP platform.
- Practical ability to design, implement, migrate, and operate at least one major SASE or SSE platform, including SWG, CASB, ZTNA, FWaaS, traffic steering, TLS inspection, connectors, and performance.
- Experience assessing, prioritizing, tracking, and validating vulnerability remediations.
- Skills in Python or a comparable language, with working knowledge of automation platforms and AI-assisted development tools.
- Excellent communication skills and sound judgment.
- Preferred: master's degree in Computer Science, Cybersecurity, Information Security, or a related discipline.
- Preferred: experience integrating security controls with Splunk, Datadog, Torq, Palo Alto Cortex XSOAR, or comparable tooling.
- Preferred: experience applying AI to security detection, policy engineering, investigation, or operational efficiency, including enterprise generative AI controls.
- Preferred: working knowledge of the NIST Cybersecurity Framework, CIS Controls, and zero trust principles.
- Preferred: familiarity with ServiceNow GRC, Optro, or similar governance platforms.
- Preferred: CISSP, CISM, CCSP, Security+, Network+, cloud security, or SASE/DLP vendor certifications.
Benefits
- Competitive compensation and benefits are offered, with programs intended to support a healthy lifestyle and changing employee needs.
- Hybrid work model with in-person collaboration and location-specific in-office expectations.
- Toast provides AI tools across disciplines to support productivity and learning.
- Toast is committed to an accessible and inclusive hiring process and provides reasonable accommodations.
About Toast, Inc.
Bottom Line – Solving business problems and generating positive growth is our jam! We are focused on helping purpose-driven brands make a positive impact with predictable Inbound Growth Programs. As a small business, we get it. Growing pains are genuine for many companies in today’s evolving digital landscape. Standing apart from your competition, connecting with your customers, predictably hitting your goals, and scaling are becoming more challenging as local and global markets expand. But it's not impossible. Digging into the unique challenges your business encounters, we analyze every detail and identify opportunities to grow. Our conversational framework is based on data, mixed with beautiful design, story-telling, and smothered in personality to craft marketing and sales strategies that make it all happen. Do you want to transform your company into a crave-worthy brand that new and existing customers will love and promote? Let's Get Cookin'!