Trust & Safety Engineer, SpotOn
Point-of-sale software and payment processing
Be an early applicant
Point-of-sale software and payment processing
1001+ employees
Be an early applicant
1001+ employees
Company mission
To empower small businesses to succeed and grow, by giving them access to cutting-edge payment and software solutions.
Role
Who you are
- 3–7+ years of experience in security engineering, compliance automation, Security Operations, or GRC-aligned roles in a SaaS or eCommerce environment
- Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or related field (or equivalent experience)
- Certifications: CISSP is preferred but not required
- Hands-on experience implementing and administering endpoint management & security technologies
- Understanding of compliance frameworks including SOC 2, PCI DSS, GDPR, and CCPA
- Hands-on experience securing cloud platforms and SaaS management tools
- Proficiency in scripting (Python, PowerShell, Bash)
- Experience leveraging AI tools and technologies to create opportunities for optimization, automation, and intelligent use of data integrations
- Experience administering a SIEM, alerting, and incident response workflows
- Experience with compliance automation platforms (e.g., Drata)
- Background in risk scoring or control maturity frameworks
- Comfortable leading large calls with key stakeholders and explaining technical controls to non-technical audiences
- A bias for action; you are a self-starter comfortable working autonomously
- Possess intellectual curiosity at all times
- Desire to build and maintain relationships across the business including both technical and non-technical teams
What the job involves
- We are seeking a Trust & Safety Engineer to help protect our SaaS-based eCommerce platform by blending compliance engineering with security operations
- In this role, you will build, operate, and automate security controls while designing infrastructure that meets the highest standards of trust and safety
- This role blends compliance engineering, security operations, and risk monitoring
- You will be responsible for ensuring our systems meet regulatory and trust requirements (SOC 2, ISO 27001, PCI DSS, GDPR/CCPA) while also leading core security detection, monitoring, and incident response capabilities
- We believe that trust is earned—and sustained—through transparency, accountability, and secure engineering
- As a Trust, Safety & Security Operations Engineer, you’ll help us ensure our business, systems, and people operate with integrity and compliance at every level
- Lead security incident response efforts, including containment, investigation, root cause analysis, and post-incident reviews. You must be able to organize complex information, initiate response workflows, and confidently lead calls with key stakeholders
- Manage and monitor endpoint security tools (e.g., CrowdStrike). You must be familiar with modern security requirements for managed devices including laptops, containerized resources, servers, and mobile devices
- Operate and enhance security monitoring and alerting across cloud, SaaS, endpoint, and identity environments
- Triage and investigate security alerts related to access misuse, policy violations, suspicious activity, and data exposure
- Maintain and tune SIEM detections, alert thresholds, and response playbooks
- Leverage AI tools and technologies to enhance Security Operations
- Lead the technical requirements to enable automation capabilities to improve time-to-respond, evidence collection, and overall efficacy for visibility and reporting
- Implement and automate compliance workflows by building integrations that support SOC 2, ISO 27001, PCI DSS, and privacy initiatives
- Ensure evidence is collected automatically and control performance is continuously validated
- Translate policies into technical solutions, and annually maintain policies to ensure they remain current with evolving business and regulatory needs
- Evaluate risk posture and technical requirements for third-party vendors to ensure alignment with internal trust and security standards
- Identify areas for AI tools and technologies to enhance GRC functions
- Engineer and maintain data protection controls—including encryption, logging, access management, data retention, and proper storage and segregation of PII
- Conduct periodic user access reviews and implement least-privilege access controls and privileged access workflows
- Detect and investigate insider risk indicators and anomalous access patterns
- Secure by Design: Partner with product, engineering, and IT teams to embed compliance-by-design principles into new systems and business processes
Our take
SpotOn is an end-to-end software and payment platform that provides businesses with a range of payment options, from simple mobile payments to fully integrated restaurant management systems, fueling growth and supporting business evolution, with its innovative, future-proof tools.
The company’s ecosystem of intuitive software, point-of-sale, and payment solutions serves businesses of all sizes from a range of industries, from local family restaurants to Major League Baseball Stadiums. From its flagship SpotOn Restaurant to its latest SpotOn Retail, the company provides tools that manage scheduling, analytics, custom website development, compliance, and omnichannel capabilities.
As a triple unicorn company, SpotOn has seen substantial growth since being founded in 2017, completing numerous funding rounds and consistently delivering new product capabilities and expanded offerings. SpotOn continues to focus on the further development of technology products as it expands its market reach within the retail, food, and hospitality sectors.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
31% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
May 2022
$300m
SERIES F
Sep 2021
$300m
SERIES E
Total funding: $915m
Company benefits
- Medical, Dental and Vision Insurance
- 401k with company match
- Stock Options
- Paid vacation, 11 company holidays, sick time, and volunteer time off
- Headspace membership for guided meditation and stress relieving tools through the Sequoia App
- Employee Resource Groups for Diversity and Inclusion, Women, LGBTQIA+, and other communities
- Desk, Chair and Monitor needed for your home office? We got you
- Monthly cell phone and internet stipend
- Unlimited access to virtual audio and visual workouts through the Sequoia App
- Subscription to Linkedin Learning to expand your knowledge on all kinds of fun topics
- Tuition reimbursement for up to 2k per calendar year to assist with classes of your choice
Company HQ
Financial District, San Francisco, CA
Leadership
Doron Friedman
(Managing Director)Having studied at the Wharton School, spent almost 11 years at Arroweye Solutions, rising to the position of CEO. Co-founded SpotOn in 2011, and was initially the company's co-CEO. Since 2017 has been Managing Director.
Matthew Hyman
(Managing Partner)Founded CardPayment Solutions in 2000, spending 5 years managing the company before starting CentralPayment Corp. After that co-founded SpotOn with Doron, working since 2017 as Managing Partner.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 22 more jobs at SpotOn