Staff Engineer, Cloud Security
Toast · Remote, US
About this role
**Toast — Staff Engineer, Cloud Security** Toast builds technology that helps restaurants and local businesses succeed in a digital world—supporting operations, increasing sales, engaging customers, and keeping employees happy. The **Product & Platform Security** team protects the cloud infrastructure and services restaurants rely on every day. We’re looking for a **Staff Engineer, Cloud Security** to expand the scope and coverage of Toast’s cloud security capabilities. This is a **hands-on role with technical leadership responsibilities**: you’ll build and operate security tooling and controls, while also shaping strategy, mentoring teammates, and influencing engineering roadmaps across R&D. **Primary focus:** AWS. You’ll partner closely with Platform and Infrastructure teams in R&D, and with Defense & Response and other Security Engineering teams within Trust & Security. --- ## Responsibilities - Own and operate Toast’s **Cloud-Native Application Protection Platform (CNAPP)**, including tuning, coverage, integrations, and turning findings into prioritized, actionable work. - Lead **Cloud Security Posture Management (CSPM)** across Toast’s AWS organization and accounts—defining standards and measuring adherence over time. - Drive **identity and access management** improvements (least privilege, role/permission design, reducing standing access). - Secure **container environments** (image/workload security, cluster configuration, runtime protection). - Build **guardrails and secure defaults** into infrastructure as code and deployment pipelines. - Perform **secure architecture reviews** and **threat modeling** for cloud services and platform capabilities. - Partner with the **SOC** on cloud detection coverage, logging, and investigation readiness. - Run and improve **cloud vulnerability and misconfiguration remediation** programs with engineering owners to reduce risk. - Participate in **security incident response** (including on-call), leading the cloud-side investigations and follow-up. - Set the **multi-year direction** for cloud security at Toast; mentor and level up engineers. - Build trusted relationships with Platform, Infrastructure, and product engineering leaders—using data and clear risk communication to influence priorities. --- ## Requirements - **8+ years** in security engineering, infrastructure, or software engineering, with significant focus on **cloud security**. - Deep, hands-on experience securing **AWS environments at scale** (IAM, Organizations, networking, logging, and core security services). - Experience deploying and operating cloud security tooling such as **CNAPP/CSPM** platforms (e.g., Orca, Wiz, Upwind). - Experience with **container and Kubernetes security** (e.g., **EKS**). - Experience with **threat modeling** and **security architecture reviews** for cloud services. - Experience responding to **security incidents** in cloud environments. - Proficiency with **infrastructure as code** (e.g., Terraform) and at least one automation language (e.g., Python or Go). - Track record leading cross-team technical initiatives and influencing teams without direct authority. - History of setting technical direction for a security domain, including a multi-year roadmap and rationale. - Clear written and verbal communication, including explaining risk and tradeoffs to engineers and leaders. --- ## Nice to Haves - Experience with **GCP, Azure, or other cloud platforms**. - Experience with **cloud detection engin
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.