The opportunity
Toast creates technology to help restaurants and local businesses succeed in a digital world, helping business owners operate, increase sales, engage customers, and keep employees happy.
What you'll do
Own and operate our Cloud-Native Application Protection Platform (CNAPP),: including tuning, coverage, integrations, and turning findings into prioritized, actionable work for engineering teams.
Lead cloud security posture management (CSPM) across our AWS organization and: accounts, defining standards and measuring adherence over time.
Drive identity and access management improvements, including least privilege,: role and permission design, and reducing standing access.
Secure our container environments, from image and workload security to: cluster configuration and runtime protection.
Build guardrails and secure defaults into infrastructure as code and: deployment pipelines, so that teams get secure configurations by default rather than through review.
Perform secure architecture reviews and threat modeling for new and existing: cloud services and platform capabilities.
What they're looking for
- Partner with our SOC on cloud detection coverage, logging, and investigation readiness.
- Run and improve cloud vulnerability and misconfiguration remediation: programs, working with engineering owners to drive risk down.
- Participate in security incident response, including on-call coverage, and: lead the cloud side of investigations and follow-up work.
- Set the multi-year direction for cloud security at Toast, and mentor and uplevel other engineers on the team.