Senior Cloud Security Engineer & Platform Lead

OpenKrill; United States; Hybrid; USD 193,000 - 309,000; Full time

Job summary

Toast is seeking a Staff Engineer, Cloud Security to shape and execute the security strategy for our cloud environments. You will lead hands-on activities building and operating security tooling, while also mentoring teammates and guiding roadmaps across R&D.

You will own CSPM across AWS, enforce least privilege, secure containers, and drive secure architecture reviews. This role requires strong communication with Platform, Infra, and product teams and a track record of cross-team impact.

Qualifications

• 8+ years in security engineering, infrastructure, or software, with cloud security focus.
• Deep hands-on AWS security experience: IAM, Organizations, networking, logging.
• Experience deploying CNAPP or CSPM platforms (Orca, Wiz, Upwind).
• Security-focused container and Kubernetes security (EKS).
• Threat modeling and security architecture reviews for cloud services.
• Incident response experience in cloud environments.
• Infrastructure as code (Terraform) and automation in Python or Go.
• Proven ability to lead cross-team initiatives and influence engineers.
• Experience setting multi-year security roadmaps and technical direction.

Responsibilities

• Own and operate CNAPP, tuning coverage and turning findings into prioritized work for engineering teams.
• Lead CSPM across AWS accounts, define standards and measure adherence over time.
• Improve IAM, least privilege, and reduce standing access across cloud environments.
• Secure container environments, including image/workload security and runtime protection.
• Build secure defaults into infrastructure as code and deployment pipelines.
• Perform secure architecture reviews and threat modeling for cloud services.
• Partner with SOC on cloud detection, logging, and investigation readiness.
• Run vulnerability and misconfiguration remediation programs with engineering teams.
• Participate in security incident response, including on-call coverage and investigations.
• Set multi-year cloud security direction and mentor engineers.

Skills

Cloud security engineering

AWS security at scale

CNAPP/CSPM tooling

Container/Kubernetes security

Threat modeling

Incident response

Terraform / IaC

Python or Go automation

Cross-team leadership

Security roadmaps

Tools

Orca

Wiz

Upwind

EKS

Job description

Toast is seeking a Staff Engineer, Cloud Security to shape and execute the security strategy for our cloud environments. You will lead hands-on activities building and operating security tooling, while also mentoring teammates and guiding roadmaps across R&D.

You will own CSPM across AWS, enforce least privilege, secure containers, and drive secure architecture reviews. This role requires strong communication with Platform, Infra, and product teams and a track record of cross-team impact.