Cybersecurity Engineer

Tillster; San Diego (CA); On-site; USD 65,000 - 85,000; Full time

Benefits offered by this job

Health benefits

Paid holidays

PTO (vacation)

401(k) plan

Tuition/learning assistance

Job summary

Tillster is seeking an Associate Cyber Security Engineer in San Diego, CA. This hybrid, on-site role focuses on monitoring, detecting, and responding to security threats across systems and networks.

The engineer investigates alerts, supports incident containment, and aids continuous security improvements. Responsibilities include vulnerability tracking, threat analysis, security awareness training assistance, and collaboration with IT/DevOps.

Qualifications

• Experience monitoring security alerts from SIEM/EDR/IDS/IPS.
• Hands-on incident response and containment experience.
• Proficiency with security tooling and documentation practices.

Responsibilities

• Monitor security alerts from SIEM, EDR, IDS/IPS, and other tools.
• Investigate security events and support containment and recovery efforts.
• Analyze attacker techniques, stay current on threats, and improve detections.
• Review vulnerabilities and track remediation with validation.
• Assist in phishing simulations and security awareness training.
• Document incidents, investigations, and response actions; prepare leadership reports.
• Collaborate with Security, IT, and DevOps teams; support audits and compliance.

Skills

SIEM & EDR

Incident response

Threat intelligence

Security monitoring

Tools

SIEM

EDR

IDS/IPS

Phishing simulation tools

Runbooks & playbooks

Job description

Role: Associate Cyber Security Engineer

Hybrid Role, MUST BE BASED IN SAN DIEGO, CA

About Tillster

Tillster, headquartered in the USA, is the global leader in digital ordering and customer engagement solutions. For over a decade, we have developed revolutionary self-service ordering and payment solutions – for mobile, tablet, online, kiosk, call center, and more – creating personalized interactions based on consumer preferences, language, and currency. Our platform is compatible with 15+ unique POS systems, representing over 90% coverage in multi-unit restaurants. We offer one platform; one scalable, enterprise-class solution – to create world-class digital engagement solutions.

Our mission and passion are one in the same: Empower restaurants and consumers to engage and transact anywhere, anytime, and from any device - one consumer at a time, one order at a time, billions of times over. In doing so together we are transforming e-commerce in restaurants and make the till grow for Tillster and our customers.

Job Summary

The Associate Cyber Security Engineer is responsible for monitoring, detecting, analyzing, and responding to security threats across the organization’s systems and networks. This role is hands‑on and operational, serving as the front line of defense by investigating alerts, responding to incidents, and supporting continuous improvement of the security program.

Key Responsibilities

Security Monitoring & Detection

• Monitor security alerts from SIEM, EDR, IDS/IPS, and other security tools
• Identify suspicious activity, anomalies, and potential security incidents
• Triage alerts and determine severity, scope, and impact
• Escalate incidents according to defined procedures

Incident Response & Investigation

• Investigate security events and confirm true positives
• Assist with containment, eradication, and recovery efforts
• Collect and preserve evidence for incident analysis
• Participate in post‑incident reviews and lessons learned

Threat Analysis & Intelligence

• Analyze attacker techniques, tactics, and procedures (TTPs)
• Stay current on emerging threats and vulnerabilities
• Contribute to threat intelligence and detection improvements
• Recommend enhancements to alerting and response processes

Vulnerability & Risk Support

• Review vulnerability scan results and assist with validation
• Track remediation efforts and verify fixes

Security Awareness Training & Phishing

• Assist in developing, delivering, and maintaining security awareness training for employees, including onboarding and annual refresher content
• Plan, configure, and execute phishing simulation campaigns in coordination with senior team members
• Monitor and triage user-reported suspicious emails, escalating confirmed phishing attempts as security incidents
• Analyze phishing simulation and training results to identify high‑risk users, departments, and trends
• Coordinate targeted follow‑up training for users who repeatedly fail phishing simulations
• Track training completion and report security awareness program metrics to leadership

Documentation & Reporting

• Document incidents, investigations, and response actions
• Maintain runbooks, playbooks, and procedures
• Prepare reports and metrics for leadership and compliance needs

Collaboration & Support

• Work closely with Security Engineers, IT, and DevOps teams
• Provide guidance during active security incidents
• Support audits and compliance efforts (SOC 2, ISO 27001, PCI, etc.)

Success Metrics

Success in the Associate Cyber Security Engineer position will be evaluated based on performance against key objectives and measurable performance indicators, including, but not limited to:

1. Security Monitoring & Alert Triage – Monitor security tools and triage alerts accurately, consistently, and within established service levels.

2. Incident Investigation & Response Support – Investigate security events and support containment, eradication, and recovery efforts under the direction of senior team members.

3. Threat Analysis & Detection Improvement – Apply threat knowledge to strengthen alerting, detection, and response processes.

4. Vulnerability & Risk Management Support – Help validate vulnerabilities and track remediation through verified closure.

5. Security Awareness Training & Phishing – Support security awareness training and phishing simulation programs that measurably reduce human‑related security risk.

6. Documentation & Reporting – Maintain accurate, complete, and timely security documentation and reporting.

7. Audit & Compliance Support – Support audit and compliance efforts, including SOC 2, ISO 27001, and PCI DSS.

8. Cross‑Functional Collaboration – Partner effectively with Security Engineering, IT, and DevOps teams.

9. Professional Growth & Skill Development – Build technical depth and increasing independence across security operations.

These success metrics and performance indicators are intended to provide a framework for evaluating performance and are not exhaustive. The Company may establish, modify, replace, reprioritize, or adjust these metrics, thresholds, service levels, and performance expectations from time to time based on evolving business requirements, technologies, security risks, regulatory obligations, and operational needs. Performance will also be evaluated based on the overall responsibilities, conduct, judgment, collaboration, learning and development, and expectations of the position.

Pay and Benefits (USA)

• Salary is $65,000-$85,000
• Health Benefits: All full‑time, regular employees and their dependents are eligible for medical, dental, vision and FSA benefits. Additional health benefits include Healthcare and Dependent Care reimbursement programs, Employee Assistance Program (“EAP”) and Optum Care 24-hour confidential medical counseling services.
• Holidays: The company observes ten (10) paid holidays per calendar year.
• Paid Time Off (PTO): Full‑time, regular employees earn 15 days of PTO in the first 12-months of continuous service, and 22 days in subsequent years. Eligible part‑time employees earn pro‑rated PTO.
• Retirement: Effective with your employment start date, you will be eligible to participate in the 401(k) Plan.
• Education, Learning & Development: We offer college tuition and education assistance programs; Udemy Learning courses; and ongoing learning and development opportunities.

Local Candidates Only

No Visa Sponsorship

Principals only – no Agencies or calls please