Senior Product Security Engineer at Toast

Toast, Inc.

Remote Actively hiring Posted today Verified listing

Remote (Boston, MA, US) Posted 1 day ago $146,000–$234,000 / year

Job Posting Log in to save

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $192k

This role $190k

$135k most similar roles pay here $245k

This role pays less than 52% of similar roles. Most pay $152,618–$231,994 — the shaded band above. At the midpoint, this role pays about $190k versus about $192k for comparable roles.

Based on 240 similar postings.

Employer

About Toast, Inc.

Toast is a cloud-based restaurant management platform providing point-of-sale, payment processing, and operations software for the food service industry.

Toast, Inc. currently has 45 open roles on FindRole.

Listed pay typically runs $159,000–$254,000 across 43 roles with salary data.

Most-posted roles

View all roles at Toast, Inc.

At a glance

TL;DR

As a Senior Product Security Engineer at Toast, you will join the SEAR team to focus on actionable intelligence collection and analysis while hunting adversaries who threaten Toast’s customers. Your daily responsibilities include designing and building services for security intelligence across platforms, identifying and remediating application vulnerabilities, improving developer tooling, and collaborating with incident response teams. You’ll also build threat models and guide in network architecture design. The role requires a minimum of 5 years’ experience in application security, expertise in Java web services, Python scripting, cloud applications, and fintech security. Additionally, you should have a strong understanding of privacy and cryptography patterns. This position offers the chance to work on cutting-edge technology with significant real-world impact, ensuring businesses trust Toast’s digital solutions every day.

Skills

Java Python LLM AI Cloud Application Architecture PKI Access Management Data Tokenization Anonymization RDBMS SAST DAST SCA WAF API Security SSDL CI/CD PostgreSQL Kubernetes AWS Grafana Prometheus

What you'll do

Design and implement security services to manage intelligence across Toast platforms.
Identify and remediate application vulnerabilities with a focus on anti-abuse measures.
Enhance developer tooling for robust integration of security features in the SSDLC.
Provide expert guidance to teams on making informed, security-conscious decisions.
Assist incident response teams with application security expertise related to abuse and fraud.

What we're looking for

Minimum 5+ years of experience in application security and security engineering.
Experience building and maintaining scaled Java web services in production, developing scripts in Python for backend data handling.
Strong understanding of cloud application architecture, privacy, security, and cryptography patterns.
Successful history as a subject matter expert guiding colleagues on better security outcomes related to abuse, fraud, and legal concerns.
Previous security experience working with fintech applications and associated requirements.

Save