The opportunity
Toast creates technology to help restaurants and local businesses succeed in a digital world, helping business owners operate, increase sales, engage customers, and keep employees happy.
What you'll do
Own the DLP engineering roadmap and control lifecycle, from requirements and: architecture through proof of concept, testing, phased deployment, tuning, operations, and continuous improvement.
Design and operate controls for sensitive data across managed endpoints,: email, web and network channels, SaaS and collaboration applications, cloud environments, and data repositories.
Build and maintain data discovery and classification logic using sensitive: information types, regular expressions, data matching, document fingerprinting, OCR, and machine learning where appropriate.
Translate requirements into precise policies and response actions with documented exceptions.
Establish safe policy rollout practices with test cases, pilot groups, change: control, user impact analysis, exception review, and measurable acceptance criteria.
Triage and investigate DLP alerts and incidents, determine root cause and: business context, coordinate containment and remediation, and reduce false positives without weakening protection.
What they're looking for
- Integrate DLP with SASE services, SIEM/SOAR platforms, MDM, ticketing: systems, data classification, data security posture management, and relevant response workflows.
- Define dashboards and metrics for coverage, control effectiveness, detection: precision, recurring exfiltration paths, policy exceptions, incident volume, and time to resolution.
- Engineer and operate scalable SASE capabilities for corporate fleet, SaaS,: private apps, and cloud environments.
- Configure and optimize core capabilities including secure web gateway, cloud: access security broker, zero trust network access, firewall as a service, DNS security, remote browser isolation, DLP, digital experience monitoring, and SD-WAN or SSE integrations.