Staff Engineer, Cloud Security

Toast, Inc.

Confirmed live today High trust
Remote

Quick summary

Work type
Remote
Location
Remote
Salary
$193,000–$309,000 / yr
Posted
6 days ago
Freshness
Confirmed live today
Closes
Jan 24, 2027

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $186k
This role $251k
$123k $329k
below market most similar roles pay here above market

This role pays more than 90% of similar roles. Most pay $153,513–$219,200 — the blue band above. At the midpoint, this role pays about $251k versus about $186k for comparable roles.

Based on 240 similar postings.

Employer

About Toast, Inc.

Toast is a cloud-based restaurant management platform providing point-of-sale, payment processing, and operations software for the food service industry.

Toast, Inc. currently has 26 open roles on FindRole.

Listed pay typically runs $193,000–$309,000 across 26 roles with salary data.

Most-posted roles

View all roles at Toast, Inc.

At a glance

TL;DR · Staff Engineer, Cloud Security

The Staff Engineer, Cloud Security joins the Product & Platform Security team to expand and secure cloud infrastructure and services. In this hands-on technical leadership role, you will build and operate security tooling, set multi-year strategic direction, and mentor teammates. Key responsibilities include owning the Cloud-Native Application Protection Platform, leading cloud security posture management, and driving identity and access management improvements. You will secure container environments, build guardrails into infrastructure as code, and perform threat modeling for cloud services. Required expertise includes deep experience with AWS, IAM, networking, and logging, alongside proficiency in Terraform and programming languages like Python or Go. You will also manage vulnerability remediation, participate in incident response, and collaborate with Platform and Infrastructure teams to solve complex cloud security problems.

What does a Engineer earn in Remote?

Median $199471 from 30 postings across 16 companies.

See salary data

What you'll do

  • Own and operate the Cloud-Native Application Protection Platform (CNAPP) including tuning and integration.
  • Lead cloud security posture management (CSPM) across the AWS organization and define security standards.
  • Drive identity and access management improvements including least privilege and role design.
  • Secure container environments from image and workload security to cluster configuration and runtime protection.
  • Build security guardrails and secure defaults into infrastructure as code and deployment pipelines.
  • Perform secure architecture reviews and threat modeling for new and existing cloud services.
  • Run and improve cloud vulnerability and misconfiguration remediation programs with engineering owners.
  • Participate in security incident response and lead the cloud side of investigations.

What we're looking for

  • 8+ years of experience in security engineering, infrastructure, or software engineering with a focus on cloud security.
  • Deep hands-on experience securing AWS environments at scale, including IAM, Organizations, networking, logging, and core security services.
  • Experience deploying and operating cloud security tooling such as CNAPP or CSPM platforms.
  • Experience with container and Kubernetes security, specifically EKS.
  • Experience performing threat modeling and security architecture reviews for cloud services and platform capabilities.
  • Experience responding to security incidents in cloud environments.
  • Proficiency with infrastructure as code (e.g., Terraform) and at least one programming language for automation (e.g., Python or Go).
  • Experience with GCP, Azure, or other cloud platforms (preferred).

More like this

Similar roles

Cloud Security Engineer

Booz Allen Hamilton

Beavercreek, OH +1 5 days ago $86,800–$198,000
AWS Risk Management Framework (RMF) IAM VPC Splunk OpenSearch Security Hub GuardDuty CloudTrail STIG Linux SDLC Microsoft Azure Oracle Cloud Vulnerability Management Continuous Monitoring
5+ yrs exp

Senior Cloud Security Engineer

Alloy

New York, NY 34 days ago $163,000–$206,000
AWS Terraform Kubernetes EKS Python TypeScript SIEM CSPM VPC WAF GuardDuty Config Inspector KMS IAM Public Key Infrastructure Cryptography Incident Response
3+ yrs exp Hybrid

Staff Software Engineer, Security

Okta Inc

Bellevue, WA 15 days ago $194,000–$267,000
Java Application Security Cryptography Authentication Authorization Certificates Secrets Management AWS GCP MySQL Redis Elasticsearch Post-Quantum Cryptography Agentic AI Distributed Systems Agile
8+ yrs exp

Senior Cloud Security Engineer

Adobe

Lehi, UT +2 39 days ago
AWS Azure GCP Kubernetes Terraform CloudFormation Python Go Rust CI/CD Infrastructure as Code policy-as-code Identity and Access Management Serverless Networking Distributed Systems

Senior Security Engineer II

Braze

Chicago, IL +1 95 days ago $149,000–$235,000
AWS GCP Kubernetes Terraform Python MongoDB SIEM CrowdStrike Tenable IAM RBAC CI/CD Infrastructure-as-Code Threat Modeling Incident Response EDR CSPM Cloud Security Vulnerability Management
Hybrid

Senior Security Engineer II

Braze

Atlanta, GA +1 70 days ago $149,000–$235,000
AWS GCP Kubernetes Terraform Python MongoDB SIEM CrowdStrike Tenable IAM CI/CD Threat Modeling Incident Response Infrastructure-as-Code EDR CSPM RBAC
Hybrid