Senior Product Security Engineer, Toast

• Minimum 5+ years of experience in application security and security engineering
• Experience building and maintaining scaled Java web services in production
• Experience developing script applications in Python for scheduling and backend data handling
• Experience leveraging LLM AI features for software development and/or security operations
• Strong understanding of cloud application architecture
• Successful history of being a subject matter expert to guide colleagues toward better security outcomes, especially related to abuse, fraud and legal concerns
• Previous security experience working with fintech applications and associated requirements
• Strong understanding of privacy, security, and cryptography patterns and when to apply them, especially when handling customer information (such as PKIs, access management, data tokenization, and anonymization)

Desirable

• SEAR at Toast focuses on two things: actionable intelligence collection, analysis, and delivery to engineers, and hunting the adversaries who would damage and defraud Toast, its customers, and its partners
• We bake security into every layer of our products, from the first sprinkle of an idea to the final serving of a fully-baked solution. Our team is tasked with searching out and degrading the operations of persistent, motivated attackers
• Like master chefs, we blend cutting-edge technology with strategic thinking, implementing bespoke and industry-standard solutions for intelligence processing at scale. By joining SEAR, you'll be part of the kitchen crew that keeps our customers' trust from going stale
• You'll tackle complex challenges that have real-world impact, helping to serve up a safer, more secure digital experience for businesses that count on Toast every day. It's not just about pattern-matching – it's about crafting a recipe for digital trust that keeps our customers coming back for more
• Select, implement, design, and build services and tools to manage and deliver security intelligence across Toast platforms
• Identify, triage, and provide remediation guidance for application vulnerabilities, with a specific focus on anti-abuse activities
• Improve developer tooling and adoption to build a more robust SSDLC which integrates security and anti-abuse features
• Practice a #OneTeam attitude to help other Toast teams make informed, security-conscious decisions when building new public-facing software
• Assist incident response teams with application security expertise and tools, especially related to abuse and fraud
• Build threat models on Toast applications and use cases
• Guide in the design and maintenance of robust and resilient network and application architecture
• Collaborate to improve information gathering and sharing across all Toast products
• Leverage cutting edge AI tools to enhance your development workflow, improve velocity, and help pioneer new approaches to building - contributing to a culture of innovation and productivity across the team