Senior Director, Product and Platform Security

Toast, Inc.

Confirmed live today High trust
Remote

Quick summary

Work type
Remote
Location
Remote
Salary
$275,000–$440,000 / yr
Posted
9 days ago
Freshness
Confirmed live today
Closes
Dec 31, 2026

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $212k
This role $358k
$138k most similar roles pay here $472k

This role pays more than 98% of similar roles. Most pay $178,537–$246,131 — the shaded band above. At the midpoint, this role pays about $358k versus about $212k for comparable roles.

Based on 240 similar postings.

Employer

About Toast, Inc.

Toast is a cloud-based restaurant management platform providing point-of-sale, payment processing, and operations software for the food service industry.

Toast, Inc. currently has 30 open roles on FindRole.

Listed pay typically runs $193,000–$309,000 across 28 roles with salary data.

Most-posted roles

View all roles at Toast, Inc.

At a glance

TL;DR · Senior Director, Product and Platform Security

As the Senior Director, Product and Platform Security, you will join the Trust & Security organization as a flagship hire reporting directly to the CISO. You will lead and grow a team of security engineers focused on an engineering-led, proactive approach to protecting the company's cloud software, payments, and hardware systems. Your daily responsibilities include managing AppSec and CloudSec programs, overseeing threat modeling, ensuring software supply chain integrity, and running offensive security through red team and purple-team rhythms. You will build "paved roads" by creating shared services, guardrails, and automated tools to ensure secure defaults for developers. Key technical requirements include expertise in cloud-native security, infrastructure as code, CI/CD pipeline security, containers, and microservices. This role solves the challenge of embedding security into the product lifecycle rather than treating it as a reactive compliance check.

What you'll do

  • Lead the security engineering team by managing existing staff and hiring new engineers to expand scope.
  • Develop shared services, guardrails, and secure defaults to make the safe path easy for product teams.
  • Manage application and cloud security programs including threat modeling and software supply chain integrity.
  • Build developer enablement through tooling adoption, training, and a security champions network.
  • Execute offensive security initiatives including red team testing and purple-team collaboration with detection engineering.
  • Oversee hardware security practices as part of the broader product security remit.
  • Partner with product and engineering leaders to integrate AI and automation into secure product delivery.
  • Maintain a single view of product and cloud security posture while ensuring vulnerability SLAs are met.

What we're looking for

  • Experience running a multi-team security engineering organization rather than a single-team application security queue.
  • Depth in cloud-native security including infrastructure as code, CI/CD pipeline security, containers, and microservices.
  • Proven track record of shifting security left through self-service and paved roads to reduce developer friction while increasing coverage.
  • Experience being treated as a peer by senior engineering leaders to change how products are built rather than just flagging errors.
  • Background in engineering or software development rather than traditional audit or consulting.
  • Ability to demonstrate judgment regarding where to automate, embed, or hold a line.
  • A view on securing AI in a product (preferred).
  • Experience and judgment negotiating compromises with engineering teams in difficult situations (preferred).

More like this

Similar roles

Senior Product Security Architect

Early Warning Services

Scottsdale, AZ +3 66 days ago
Application Security Security Architecture Cloud Security Microservices CI/CD Threat Modeling SAST Veracode Fortify AWS GCP Azure Kubernetes VMware OpenStack Linux Windows ISO PCI OWASP NIST 800-53 BSIMM
10+ yrs exp Hybrid

Vice President Product and Platform Security

The Federal Reserve

Chicago, IL +2 5 days ago $308,700–$365,100
Application Security DevSecOps SSDLC Threat Modeling SAST DAST IAST SCA Penetration Testing NIST Frameworks Microservices APIs Containers Cloud Security AWS Azure GCP Cryptography Security Automation
10+ yrs exp

Senior Engineering Manager, Application Security

Betterment

New York, NY 114 days ago $210,000–$250,000
Application Security AWS Kubernetes Containers CI/CD Threat Modeling Vulnerability Management Secure SDLC Code Review AI-assisted security tools
Hybrid

Senior Director, Product Security

Anduril Industries

Costa Mesa, CA 16 days ago $253,000–$336,000
C/C++ Golang Rust Python Linux Firmware IoT Embedded Systems Cyber-Physical Systems SDLC Reverse Engineering Anti-tamper AI Programmable Logic Devices

Senior Director, Cyber Security Product Manager

Capital One Financial

McLean, VA +3 3 days ago $314,800–$359,300
Cybersecurity NIST CSF MITRE ATT&CK CMMC FedRAMP Multi-cloud Splunk Crowdstrike Qualys AWS Security Hub Threat Intelligence Control Automation
10+ yrs exp

Director, Product Security

Green Dot Corp

Los Angeles, CA +4 23 days ago
Application Security SAST DAST CI/CD Security Architecture Mobile Security DevOps Cybersecurity Product Security
8+ yrs exp Hybrid