Toast
Toast
Toast dezvoltă software și hardware integrate pentru industria alimentară și a băuturilor. Platforma sa reunește tehnologii pentru puncte de vânzare, procesarea plăților, comenzi online, salarizare și instrumente operaționale, ajutând restaurantele să își gestioneze activitatea de zi cu zi într-un singur sistem. Toast deservește o gamă largă de afaceri, inclusiv restaurante cu servire rapidă și cu servire completă, localuri fast-casual, restaurante de lux, cafenele și rulote cu mâncare, publicând totodată informații despre industrie și resurse educaționale pentru operatorii de restaurante.

Staff Cloud Security Engineer at Toast (Hybrid, US)

Lead cloud security strategy and protect Toast’s AWS infrastructure and services. Oversee CNAPP, CSPM, IAM, Kubernetes security, and incident response.

Descriere

  • Own and run Toast’s cloud-native application protection platform, refining its configuration, coverage, integrations, and finding priorities.
  • Lead cloud security posture management across AWS accounts and the organization.
  • Improve identity and access management by advancing least privilege and reducing standing access.
  • Protect container environments through image and workload security, cluster configuration, and runtime safeguards.
  • Build security guardrails and safe defaults into infrastructure-as-code and deployment pipelines.
  • Review cloud service and platform architectures for security, and conduct threat modeling.
  • Work with the SOC to strengthen cloud detection coverage, logging, and investigation readiness.
  • Manage and improve remediation programs for cloud vulnerabilities and misconfigurations.
  • Take part in security incident response, including on-call coverage, and lead cloud investigations and follow-up actions.
  • Define Toast’s long-term cloud security direction.
  • Mentor engineers and help grow their skills.
  • Build relationships with Platform, Infrastructure, and product engineering leaders, and shape priorities through data and risk communication.

Cerințe

  • At least 8 years in security engineering, infrastructure, or software engineering, including substantial work focused on cloud security.
  • Extensive hands-on experience securing AWS environments at scale, including IAM, Organizations, networking, logging, and core security services.
  • Experience deploying and operating cloud security tools such as CNAPP or CSPM platforms.
  • Experience securing containers and Kubernetes environments, such as EKS.
  • Experience with threat modeling and security architecture reviews for cloud services and platform capabilities.
  • Experience responding to incidents in cloud environments.
  • Proficiency with infrastructure-as-code tools such as Terraform.
  • Proficiency in at least one automation language, such as Python or Go.
  • Demonstrated ability to lead technical initiatives across teams and influence engineering groups without direct authority.
  • Experience setting technical direction for a security domain, including a multi-year roadmap.
  • Strong written and verbal communication skills, including explaining risks and tradeoffs to engineers and leaders.
  • Experience with GCP, Azure, or other cloud platforms is a plus.
  • Experience with cloud detection engineering or cloud incident response is a plus.
  • Familiarity with PCI DSS or SOC 2 is a plus.
  • Relevant certifications, such as AWS Certified Security Specialty or CCSP, are a plus.
  • Experience mentoring engineers or developing a security function is a plus.

Beneficii

  • Cash compensation, including overtime and bonus or commission where eligible.
  • Equity.
  • Benefits.
  • A flexible work model that supports individual needs.
  • Opportunities for in-person collaboration.
  • AI tools provided across disciplines.
  • Reasonable accommodations for people with disabilities.

Locuri de muncă similare

General Motors

Staff Cloud Platform Engineer

General Motors

Build and evolve General Motors’ internal cloud platform, control plane, and runtime. Improve Kubernetes-based developer workflows, reliability, and software delivery at scale.

Deschide
Hewlett Packard Enterprise

Principal Cloud and AI Innovation Developer

Hewlett Packard Enterprise

Lead cloud-native and generative AI innovation at Hewlett Packard Enterprise. Shape incubation solutions, guide engineering teams, and build scalable services for cloud, datacenter, and edge environments.

Deschide
Hewlett Packard Enterprise

Principal Cloud and AI Innovation Developer at Hewlett Packard Enterprise

Hewlett Packard Enterprise

Lead incubation projects that build cloud-native AI solutions at Hewlett Packard Enterprise. Work across generative AI, distributed systems, and microservices.

Deschide
The Clorox Company

Senior Azure Data Architect

The Clorox Company

Shape Clorox’s governed Azure, Fabric, and Databricks platforms for enterprise analytics and AI. Lead data modernization, semantic modeling, and architecture standards.

Deschide
Elevance Health

Principal Cloud Engineer, AI/ML

Elevance Health

Lead development of production AI agents, cloud platforms, and FinOps tools for Elevance Health’s healthcare business. This hybrid role focuses on secure enterprise architecture and application transformation.

Deschide