Senior Director, Product and Platform Security
Toast · Remote, United States
About this role
## Senior Director, Product and Platform Security Toast creates technology to help restaurants and local businesses succeed in a digital world—operating more effectively, increasing sales, engaging customers, and keeping employees happy. Toast’s platform runs restaurants (cloud software, payments, and counter hardware). This role leads security in an engineering-led, proactive Trust & Security organization—**not** a compliance/audit-only function and **not** a pure individual-contributor architect seat. --- ### Responsibilities - **Enable the business to lead with security:** Partner with product and engineering leaders to build security into the product portfolio using **AI, automation, and innovation**. - **Lead security platform engineering:** Own shared services, guardrails, and **secure defaults**; consolidate overlapping tooling into a coherent self-service set of guardrails. - **Drive application & cloud security:** Run **AppSec** and **CloudSec** programs, secure SDLC, threat modeling, and software supply chain integrity; maintain a single owned view of product/cloud security posture and meet vulnerability SLAs. - **Build developer enablement:** Grow embedding, tooling adoption, training, and a security champions network; enable “paved roads” so engineering leaders view security as a partner. - **Run offensive security & vulnerability management:** Lead red team and penetration testing in a **purple-team** rhythm with detection engineering; decide what gets fixed first and establish cadence with detection. - **Own hardware security:** Extend platform security practices into hardware as part of the broader product security remit. - **Lead and grow the team:** Lead the existing security engineering team, develop them, shape how the function operates, and hire additional senior security engineers as scope expands. --- ### What you’ll need to thrive - Experience running a **multi-team security engineering** organization (not a single application security queue). - Depth in **cloud-native security**: infrastructure as code, CI/CD pipeline security, containers, and microservices. - Proven ability to shift security **left** via self-service and paved roads—improving developer experience while increasing coverage. - Senior engineering leaders treat you as a peer; you’ve changed how products are built, not just flagged issues. - Strong judgment on **where to automate, where to embed, and where to hold the line**. - Background in engineering/software development (ideally from a modern SaaS/cloud-native company rather than a heavily regulated, policy-driven environment). --- ### Nice to have - A view on **securing AI** in a product. - Experience negotiating compromise with engineering teams in difficult situations without losing ground on what matters. - Fintech background (helpful, though more relevant to other Trust & Security roles). --- ### Total rewards & other notes - Toast provides competitive compensation and benefits. (Benefits details: https://careers.toasttab.com/toast-benefits) - **Base salary range (US):** - Zone A: **$275,000–$440,000 USD** - Zone B: **$238,000–$381,000 USD** - Zone C: **$215,000–$344,000 USD** - Toast uses AI in hiring to support recruiters/interviewers (note-taking, summarization, documentation). Hiring decisions are made by people. Learn more: https://careers.toasttab.com/ai-in-hiring - Toast supports a **hybrid work** model. Locations: https://careers.toasttab.com/locations-toast - Accessi
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.