Staff Security Engineer - Blue Team (UK)

Academic Key; Belfast City District; Hybrid; GBP 85,000 - 110,000; Full time

Job summary

Olo, a leading SaaS platform, is hiring a Staff Security Engineer - Blue Team to lead security defense efforts across cloud services and products. This role emphasizes threat detection, incident response, and cross-functional collaboration with product and engineering teams to reduce risk and protect customer data.

The position supports remote work from Northern Ireland or other UK regions, with experience guiding distributed security engineers and implementing security controls across cloud

Qualifications

• 5+ years of Security Engineering, Security Operations or Security Architecture experience.
• Experience acting as technical lead to distributed teams, largely remote.
• Experience with PCI-DSS compliance and other standards.
• Knowledge of attacker TTPs, incident response and cyber security.
• Deep understanding of OS, networking and application concepts.

Responsibilities

• Lead Olo's Blue Team and mentor security engineers.
• Oversee information protection, incident detection and response, and service delivery.
• Coordinate vulnerability management, threat hunting, and security reviews.
• Collaborate with customers and partners to improve security posture.

Skills

Security leadership

Incident response

Threat hunting

Security engineering

OC/IR coordination

Remote collaboration

Team mentoring

Tools

Kubernetes

AWS

SIEM

WAF

Job description

Staff Security Engineer - Blue Team (UK)

Olo · Belfast, Northern Ireland, Remote

Remote

Olo is a leading SaaS platform accelerating digital transformation in the restaurant industry, by helping customers deliver more personalised and profitable guest experiences. As a result, our digital ordering, payment, and guest engagement solutions enable brands to do more with less and make every guest feel like a regular. Reporting to the Security Engineering Director, the Staff Security Engineer will act as technical lead of the Olo Security Blue Team and work on security defences that allow our systems to keep running while protecting the data of our clients and their customers. Additionally, you will help in the identification and prioritisation of future project initiatives based on risk and execute cross-functional projects with a high degree of ownership and excellence, all while actively mentoring other team members and elevating the collective team’s capabilities and skill sets. You can work remotely from anywhere in Northern Ireland.

How you’ll make an impact

Guide and coach Olo’s Blue Team on Information Protection, Incident Detection and Response and Service Delivery. You will provide strategic and technical oversight to the team and the program. Technically lead a team of security engineers and analysts who hunt, detect, and respond to internal and external threats. Collaborate with customers and partners to strengthen their security posture. Drive ongoing optimisations by implementing new technologies, replacing technologies, addressing evolving threats, scaling practices and automating security activities. Ultimately you will keep team member and customers data safe by identifying and mitigating vulnerabilities and risks by providing actionable guidance to product teams.

Information Protection Lead

Olo’s Information Protection program including the selection, testing, implementation and maintenance of security tools and services, security awareness, service provider management and the ongoing testing of those controls. Oversee Vulnerability Management program including vulnerability assessments, risk scoring and vulnerability resolution. Oversee Threat Hunting program to detect and mitigate advanced threats. Manage non-event driven security reviews, including concept reviews, design reviews, patching, firewall rules and system configuration checks. Apply Web application and API security principles and techniques, such as zero trust, RBAC, authentication, authorization, auditing, rate limiting, challenges, etc., to protect our cloud-based services from unauthorized access and abuse.

Incident Detection and Response

Oversee Incident Detection and Response program including ownership of incident response processes, tools and services and the ongoing continuous improvement of those controls. Coordinate the detection and response to attacks through all incident phases. Ensure incident reports are accurate, detailed and relevant. Monitor, detect, and remediate misconfigurations and security risks across our cloud environments. Participate in a 24/7 on-call rotation.

Security Services

Oversee Security Services program including security support requests, risk assessments, vendor assessments, PCI and SOC audit support and service provider management.

What We’ll Expect from You

• 5+ years of Security Engineering, Security Operations or Security Architecture experience.
• CISSP, GCIH or similar certification preferred.
• Experience acting as technical lead to distributed teams consisting largely of remote engineers.
• Experience complying with PCI-DSS and other compliance and regulatory standards.
• Experience with attacker tactics, techniques and procedures.
• Knowledge of information technology, evolving threats, attack patterns, incident response and cyber security standards.
• Experience developing and leading incident response, remediation and mitigation activities, and providing status updates and reports.
• Experience analyzing security events to discern events that qualify as a legitimate security incident as opposed to non-incidents (ie. incident investigation, implementing countermeasures, and conducting incident response).
• Deep understanding of operating system, networking and application concepts.
• Experience hardening Windows, MacOS, Linux Containers and Kubernetes.
• Familiarity with AWS security best practices and Infrastructure-as-Code.
• Experience deploying and maintaining security technologies. (e.g. Access Proxies, API Gateway, Anti-Malware, Application Control, Cloud Security Posture, Data Leak Prevention, Data Mapping, Endpoint Detection & Response, Intrusion Detection System, File Integrity Monitoring, Firewalls, Mobile Device Management, Multi Factor Authentication, SIEM, Static Inspection, Vulnerability Assessment, Web Proxies, WAF and Zero Trust).
• Adept at working with internal Product & Engineering, Legal, People & Culture, Finance and GTM teams and external partners, auditors and customers. Abilit

Academic Key will never request login credentials or application fees for this role.