Staff Product Security Engineer

At Toast, we are committed to creating innovative solutions that enhance security and leverage the power of artificial intelligence to drive restaurant business growth and help them thrive. We are seeking a highly skilled and experienced security professional to join our dynamic team.

Job Overview:

The Staff Security Data Engineer  will be responsible for designing, prototyping, building, and maintaining robust data pipelines and systems that enhance our security and detection posture. We are looking for an experienced data engineer with a strong understanding of entity and user behavioral analysis, with an interest in hard data science and classical machine learning methods. We will favor candidates with an independent mindset and a strong desire to discover attackers wherever they might hide.

About this roll*: (Responsibilities)

• Data Pipeline Development: Design and implement efficient and scalable data pipelines that process security-related data, ensuring integrity and availability.
• Security Integration: Collaborate with security, fraud, and abuse teams to integrate data sources relevant to threat detection, incident response, and compliance monitoring.
• Threat Modeling: Propose and participate in experiments to explore how we might better unmask attackers in our systems, both in heuristic detections and unattended learning pipelines.
• Data Modeling: Create and maintain data models that support our security analytics and reporting needs. Optimize queries for performance and usability.
• Automation and Tooling: Develop automation tools to enhance our security data management and support data collection, analysis, and reporting processes.
• Stay Current: Keep abreast of the latest trends and advancements in data engineering and security to ensure our strategies remain cutting-edge.

Do you have the right ingredients*? (Requirements)

• Education: Bachelor’s degree in Computer Science, Engineering, Mathematics, or Physics. Equivalent experience acceptable.
• Experience:
• 8+ years of experience in data engineering, with a strong focus on security data.
• Proven experience building and maintaining large-scale data pipelines and systems.
• Technical Skills:
• Proficiency in Python and other data-processing languages
• Proficiency in Linux system administration and shell scripting
• Strong understanding of data warehousing solutions (e.g., Hive, Google BigQuery).
• Familiarity with ETL tools (e.g., Apache Spark) and data integration techniques.
• Knowledge of security frameworks and standards, such as NIST, ISO, or CIS.
• Experience with AI/ML libraries and frameworks (e.g., TensorFlow, PyTorch, scikit-learn, etc.) for data analysis and modeling.
• Experience with Cloud platforms, specifically AWS, and its services.
• Analytical Mindset: Ability to analyze complex data and draw actionable insights related to security risks and vulnerabilities.
• Communication Skills: Excellent written and verbal communication skills, with the ability to convey complex concepts to both technical and non-technical audiences.
• Independent Mindset: Ability to self-direct towards the solution to problems. Asynchronous collaboration through logging and documentation is a must.

Special Sauce: (non-essential skills, nice to have)

• Advanced degrees in information or computer science
• Knowledge of compliance frameworks such as PCI, ISO, GDPR, or similar.
• Experience with data visualization tools (e.g., Grafana, Kibana, etc