Toast
Staff Engineer, Cloud Security
$151K–$309K
Remote, US +1 · Remote · Staff · Full-time · Posted Oct 20, 2026
- Location
- Remote, US
Remote - USA - Experience
- 8+ years; security engineering, infrastructure, or software engineering, with significant time focused on cloud security.
About the job
Lead and execute cloud security strategy at Toast by building security controls, tooling, and programs across its primarily AWS environment.
What you'll do
- Operate CNAPP and lead AWS cloud security posture management, turning findings into prioritized remediation work.
- Improve cloud identity, container security, infrastructure-as-code guardrails, threat modeling, detection, vulnerability remediation, and incident response.
- Set multi-year cloud security direction, mentor engineers, and influence engineering teams across R&D.
What they ask for
- 8+ years in security engineering, infrastructure, or software engineering, with significant time focused on cloud security.
- Deep hands-on experience securing AWS environments at scale, including IAM, Organizations, networking, logging, and core security services.
- Experience operating cloud security tooling such as CNAPP or CSPM, and securing containers and Kubernetes.
- Experience with cloud threat modeling, architecture reviews, and incident response; proficiency with infrastructure as code and an automation programming language.
Nice to have
- Experience with GCP, Azure, cloud detection engineering, or cloud incident response.
- Familiarity with PCI DSS or SOC 2, relevant certifications, or experience mentoring engineers.
Pay
$193,000 — $309,000 USD (base salary); $168,000 — $269,000 USD (base salary); $151,000 — $242,000 USD (base salary)
Tools
AWS, CNAPP, CSPM, Kubernetes, EKS, Terraform, Python, Go
AI focus
The role does not involve building AI products; Toast provides AI tools for employees and uses AI tools for hiring support such as interview note-taking, summarization, and documentation.
Model-written summary · the original posting is authoritative