Responsibilities
- Select, implement, design, and build services and tools to manage and deliver security intelligence across Toast platforms.
- Identify, triage, and provide remediation guidance for application vulnerabilities, with a specific focus on anti-abuse activities.
- Improve developer tooling and adoption to build a more robust SSDLC which integrates security and anti-abuse features.
- Practice a #OneTeam attitude to help other Toast teams make informed, security-conscious decisions when building new public-facing software.
- Assist incident response teams with application security expertise and tools, especially related to abuse and fraud.
- Build threat models on Toast applications and use cases.
- Guide in the design and maintenance of robust and resilient network and application architecture.
- Collaborate to improve information gathering and sharing across all Toast products.
- Leverage cutting edge AI tools to enhance your development workflow, improve velocity, and help pioneer new approaches to building - contributing to a culture of innovation and productivity across the team.
Requirements
- Minimum 5+ years of experience in application security and security engineering.
- Experience building and maintaining scaled Java web services in production.
- Experience developing script applications in Python for scheduling and backend data handling.
- Experience leveraging LLM AI features for software development and/or security operations.
- Strong understanding of cloud application architecture.
- Successful history of being a subject matter expert to guide colleagues toward better security outcomes, especially related to abuse, fraud and legal concerns.
- Previous security experience working with fintech applications and associated requirements.
- Strong understanding of privacy, security, and cryptography patterns and when to apply them, especially when handling customer information (such as PKIs, access management, data tokenization, and anonymization).
Nice to Have
- Offensive security training and certifications (e.g. OSCP, OSWE, OSEP)
- Edge Security solution like WAF, API Security
- Adversary Emulation proficiency (red/purple teaming)
- Cloud and container security technologies
- SSDLC tooling (e.g., SAST/DAST/SCA)
- Scaled data handling in RDBMS, streaming, and columnar stores
- Metrics and charting software proficiency
- Mobile apps/threats (iOS, Android), and their particular abuse vectors
- Knowledge in security of operating systems, networking and protocols
- Securing financial technologies and associated requirements
- AI at Toast
Work Arrangement
Hybrid
Team
Structure: SEAR at Toast focuses on actionable intelligence collection, analysis, and delivery to engineers, and hunting adversaries who would damage and defraud Toast, its customers, and its partners.
AI at Toast
At Toast, one of our company values is that we're hungry to build and learn. We believe learning new AI tools empowers us to build for our customers faster, more independently, and with higher quality. We provide these tools across all disciplines, from Engineering and Product to Sales and Support, and are inspired by how our Toasters are already driving real value with them. The people who thrive here are those who embrace changes that let us build more for our customers; it’s a core part of our culture.
Our Total Rewards Philosophy
We strive to provide competitive compensation and benefits programs that help to attract, retain, and motivate the best and brightest people in our industry. Our total rewards package goes beyond great earnings potential and provides the means to a healthy lifestyle with the flexibility to meet Toasters’ changing needs. Learn more about our benefits at https://careers.toasttab.com/toast-benefits. The base salary range for this role is listed below. The starting salary will be determined based on skills, experience, and geographic location. In addition to base salary, our total rewards components include cash compensation (overtime, bonus/commissions if eligible), equity, and benefits. You can learn more about how we align pay with local labor markets in our Geographic Pay Zone Philosophy. Zone A $146,000—$234,000 USD Zone B $127,000—$203,000 USD Zone C $115,000—$184,000 USD
How Toast Uses AI in its Hiring Process
Throughout the hiring process, our goal is to get to know you. We use AI tools to support our recruiters and interviewers with tasks like note-taking, summarization, and documentation of interviews to ensure they can be fully focused on your conversation. All hiring decisions are made by people. To learn more: https://careers.toasttab.com/ai-in-hiring
Diversity, Equity, and Inclusion is Baked into our Recipe for Success
At Toast, our employees are our secret ingredient—when they thrive, we thrive. The restaurant industry is one of the most diverse, and we embrace that diversity with authenticity, inclusivity, respect, and humility. By embedding these principles into our culture and design, we create equitable opportunities for all and raise the bar in delivering exceptional experiences.
We Thrive Together
We embrace a hybrid work model that fosters in-person collaboration while valuing individual needs. Our goal is to build a strong culture of connection as we work together to empower the restaurant community. To learn more about how we work globally and regionally, check out: https://careers.toasttab.com/locations-toast.
Additional Information
- AI tools are used in the hiring process for note-taking, summarization, and documentation of interviews.
- All hiring decisions are made by people.
- Toast is committed to creating an accessible and inclusive hiring process.
- Reasonable accommodations for persons with disabilities are available upon request.
- It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment.
