Staff Cloud Security Engineer - Remote | Equity

VulnU; United States; Remote; USD 151,000 - 309,000; Full time

Benefits offered by this job

Equity

Job summary

Toast is seeking a Staff Engineer for Cloud Security to expand and lead our cloud security capabilities. This hands-on role combines technical leadership with mentorship to influence roadmaps across engineering teams and partners.

You will own CNAPP, drive CSPM across AWS, and secure container environments while shaping secure defaults in pipelines. With 8+ years in security or related fields and deep AWS expertise, you will communicate risk clearly, mentor peers, and set a multi-year security

Qualifications

• 8+ years of experience in security engineering, infrastructure, or software engineering with a focus on cloud security.
• Hands-on experience securing AWS environments at scale (IAM, Organizations, networking, logging).
• Experience deploying and operating CNAPP or CSPM tooling (Orca, Wiz, Upwind).
• Container and Kubernetes security know-how (EKS).
• Proficiency with infrastructure as code (Terraform) and automation (Python or Go).
• Track record leading cross-team technical initiatives and shaping security roadmaps.
• Strong communication of risk to engineers and leaders.

Responsibilities

• Own and operate CNAPP, including tuning, coverage, and integrations.
• Lead cloud security posture management across AWS accounts, define standards, measure adherence.
• Drive IAM improvements and least privilege design.
• Secure container environments and runtime protection.
• Build secure defaults into IaC and deployment pipelines.
• Perform secure architecture reviews and threat modeling for cloud services.
• Partner with SOC on cloud detection, logging, and investigation readiness.
• Lead cloud vulnerability and misconfiguration remediation programs.
• Participate in security incident response and on-call coverage.
• Set multi-year direction for Toast cloud security and mentor engineers.
• Build relationships with Platform, Infrastructure, and product teams and communicate risk.

Skills

Cloud security engineering

Threat modeling

Incident response

Automation scripting

Tools

CNAPP

Orca

Wiz

Upwind

Terraform

Python

Go

Kubernetes

EKS

Job description

Toast is seeking a Staff Engineer for Cloud Security to expand and lead our cloud security capabilities. This hands-on role combines technical leadership with mentorship to influence roadmaps across engineering teams and partners.

You will own CNAPP, drive CSPM across AWS, and secure container environments while shaping secure defaults in pipelines. With 8+ years in security or related fields and deep AWS expertise, you will communicate risk clearly, mentor peers, and set a multi-year security