Staff Engineer, Cloud Security
Core
Staff Engineer leading cloud security strategy, tooling, and operations for Toast's AWS infrastructure to protect restaurant and local business services.
Role type
Staff Engineer, Cloud Security
Builds
Cloud-Native Application Protection Platform (CNAPP), security tooling, and secure infrastructure defaults
Domain
Cloud Security, AWS, SaaS
Required skills
AWS security (IAM, Organizations, networking), CNAPP/CSPM platforms, Kubernetes/EKS security, Infrastructure as Code (Terraform), Python/Go, threat modeling, incident response, technical leadership
Preferred skills
Multi-cloud experience (GCP/Azure), cloud detection engineering, compliance frameworks (PCI DSS, SOC 2), mentoring
Technologies
AWS, CNAPP, CSPM, Kubernetes, EKS, Terraform, Python, Go
Responsibilities
Operate and tune CNAPP; lead CSPM across AWS org; drive IAM improvements; secure container environments; build secure defaults in IaC; perform threat modeling; partner with SOC on detection/logging; run vulnerability remediation; lead cloud incident response; set multi-year security direction and mentor engineers
Seniority
Staff, hands-on IC with technical leadership
