Senior Corporate Security Engineer
About this role
Data exfiltration risks and complex access management across cloud services, web channels, and SaaS applications require robust technical solutions at Toast. The Enterprise Security team addresses these challenges by building scalable infrastructure designed to protect sensitive information and streamline secure connections for local business technology.
As a senior individual contributor, this engineer owns the design, implementation, and operational lifecycle for enterprise Data Loss Prevention and Secure Access Service Edge capabilities. Responsibilities include shaping the DLP engineering roadmap, configuring SASE platforms, and driving phased migrations away from legacy perimeter security solutions. Success in the role relies on deep hands-on technical execution, cross-functional collaboration with legal and network engineering, and clear communication regarding security risks and metrics.
Ideal candidates bring substantial enterprise security engineering experience paired with a strong automation mindset. Professionals who excel here enjoy tackling intricate architecture challenges, integrating AI-assisted developer tools into their daily workflows, and partnering closely with diverse stakeholders to maintain high security standards.
What you will do
- Own the enterprise Data Loss Prevention roadmap and control lifecycle from architecture through tuning and continuous improvement.
- Design and operate controls for sensitive data across endpoints, email, web channels, SaaS applications, and cloud repositories.
- Investigate DLP alerts and incidents to determine root cause, coordinate remediation, and reduce false positives.
- Engineer and operate scalable Secure Access Service Edge capabilities for corporate fleets, SaaS platforms, and private applications.
- Lead phased migrations from legacy VPN and proxy solutions while maintaining service continuity and user experience.
- Build data discovery and classification logic using regular expressions, document fingerprinting, OCR, and machine learning.
- Configure core SASE capabilities including secure web gateways, cloud access security brokers, and zero trust network access.
What you need
- Bachelor's degree in Engineering, Cybersecurity, or equivalent practical experience.
- Minimum of 7 years of professional experience with substantial hands-on responsibility in enterprise security engineering.
- Proven ability to architect, deploy, tune, and operate at least one major enterprise DLP platform.
- Demonstrated ability to design, implement, migrate, and operate at least one major SASE or SSE platform.
- Practical knowledge of vulnerability management including assessing, prioritizing, tracking, and validating remediations.
- Developer and automation mindset with skills in Python or a comparable language, alongside working knowledge of REST APIs.
- Excellent communication skills and sound judgment when collaborating across technical and non-technical teams.
Nice to have
- Master's degree in Computer Science, Cybersecurity, Information Security, or a related discipline.
- Experience integrating security controls with observability and automation tooling such as Splunk, Datadog, or Torq.
- Experience applying AI to improve security detection, policy engineering, or operational efficiency.
- Working knowledge of NIST Cybersecurity Framework, CIS Controls, and zero trust principles.
- Professional certifications such as CISSP, CISM, CCSP, Security+, Network+, or vendor-specific credentials.
Skills and tech stack
Questions candidates ask
What is the remote work policy for this role?
Toast embraces a hybrid work model that fosters in-person collaboration while valuing individual needs. Candidates can visit the locations page on the career site to learn more about specific in-office expectations by region.
What tools and technologies will I use on the job?
The tech stack includes Python, REST APIs, and AI-assisted developer tools like Claude, Copilot, and Codex. Engineers also work with platforms such as Splunk, Datadog, Torq, and Palo Alto Cortex XSOAR.
How does Toast use AI in the hiring process?
Toast uses AI tools to support recruiters and interviewers with tasks like note-taking, summarization, and documentation of interviews to ensure full focus on the conversation. All hiring decisions are made by people, and candidates are asked to complete interviews and assessments without real-time AI tools unless instructed otherwise.