Staff Engineer, Cloud Security

Home > Python programming jobs

Staff Engineer, Cloud Security in USA

Toast, Inc.
Full time
Email

USA
10/21/2026
Report

Remote

Responsibilities

Own and operate Toast’s Cloud-Native Application Protection Platform, including tuning, coverage, integrations, and prioritization of findings.
Lead cloud security posture management across AWS organizations and accounts by defining standards and measuring adherence.
Drive IAM improvements involving least privilege, role and permission design, and reduction of standing access.
Secure container environments through image and workload security, cluster configuration, and runtime protection.
Build guardrails and secure defaults into infrastructure as code and deployment pipelines.
Perform secure architecture reviews and threat modeling for cloud services and platform capabilities.
Partner with the SOC on cloud detection coverage, logging, and investigation readiness.
Improve cloud vulnerability and misconfiguration remediation programs with engineering owners.
Participate in security incident response and lead cloud investigations and follow-up work.
Set multi-year cloud security direction, mentor engineers, and influence engineering priorities across teams.

Requirements

8+ years of experience in security engineering, infrastructure, or software engineering, with significant time focused on cloud security.
Deep hands-on experience securing AWS environments at scale, including IAM, Organizations, networking, logging, and core security services.
Experience deploying and operating CNAPP or CSPM platforms such as Orca, Wiz, or Upwind.
Experience with container and Kubernetes security, including technologies such as EKS.
Experience performing threat modeling and security architecture reviews for cloud services and platform capabilities.
Experience responding to security incidents in cloud environments.
Proficiency with infrastructure as code such as Terraform and at least one automation programming language such as Python or Go.
Track record of leading cross-team technical initiatives and influencing engineering teams without direct authority.
Experience setting technical direction for a security domain and creating multi-year roadmaps.
Clear written and verbal communication skills for explaining risk and tradeoffs to engineers and leaders.
Experience with GCP, Azure, or other cloud platforms is preferred.
Experience with cloud detection engineering or incident response in cloud environments is preferred.
Familiarity with PCI DSS, SOC 2, or other relevant payments and SaaS compliance frameworks is preferred.
AWS Certified Security Specialty, CCSP, or another relevant certification is preferred.
Experience mentoring engineers or growing a security function is preferred.

Benefits

Hybrid work model with in-office expectations varying by region.
Toast offers health and lifestyle benefits, equity, and other total rewards programs; compensation details are excluded here.
AI tools are provided across disciplines to support work, while hiring decisions are made by people.

Salary: $151k - $309k/yr

Toast, Inc.

Bottom Line – Solving business problems and generating positive growth is our jam! We are focused on helping purpose-driven brands make a positive impact with predictable Inbound Growth Programs. As a small business, we get it. Growing pains are genuine for many companies in today’s evolving digi...

Similar positions

Staff Security Engineer

Quince
Full time

Others
10/26/2026

Bengaluru, India

Staff AI Engineer

Typeform
Full time

UK
10/25/2026

Remote

Staff Software Engineer | AI

LawPay
Full time

Remote
10/25/2026
Salary: $150k-$190k

United States

Staff Machine Learning Engineer

Quora
Full time

Remote
10/25/2026
Salary: $220k-$321k

USA, Canada

Software Engineer, AI Integrations

Zyte
Full time

Remote
10/25/2026
Salary: Competitive

Poland