Principal Compliance Analyst

Remote

Job Description / Skills Required

Toast is driven by building the restaurant platform that helps restaurants adapt, take control, and get back to what they do best: building the businesses they love.

About this roll* (Responsibilities) 

  • Identify, triage, and provide remediation guidance for application vulnerabilities
  • Select, implement, design, or build tools to thwart attacks of all shapes and sizes
  • Improve developer tooling and adoption to build a more robust SSDLC
  • Practice a #OneTeam attitude to help other Toast teams make informed, security-conscious decisions when building new software
  • Support and expand the Security Champions program
  • Assist incident response teams with application security expertise and tools
  • Think like an attacker to identify weaknesses in application architecture

 

Do you have the right ingredients*? (Requirements)

  • Experience reading, reviewing, and providing security guidance for complex code in a variety of languages and frameworks (Java, Kotlin, Javascript/ES6, React, and Python are a priority)
  • Strong understanding of cloud application architecture and common weaknesses
  • Experience identifying and helping to resolve common application security flaws (e.g. OWASP, SANS)
  • Previous experience with providing security of highly performant multi-tier applications and microservices  
  • Successful history of being a subject matter expert to guide products and lines of business to better security outcomes 
  • Strong understanding of privacy, security, and cryptography patterns and when to apply them (such as PKIs, access management, data tokenization, and anonymization)
  • Experience with AWS
  • Experience with MySQL / PostgreSQL 

Special Sauce* (Nonessential Skills/Nice to Haves)

  • Experience with web application firewalls, cloud and container security technologies, and/or SSDLC tooling (e.g. SAST/DAST/SCA) 
  • Experience with mobile apps/threats (iOS, Android) 
  • Experience with securing financial technologies

*Bread puns encouraged but not required

Our Spread of Total Rewards

  • Unlimited Vacation
  • Sabbatical opportunity after five years
  • Professional Development Reimbursement Program
  • Commitment to Employee Wellness through resources such as a quarterly Wellness Stipend
  • Various peer and company recognition programs 
  • 401(k) and matching
  • Medical, Dental, & Vision Coverage
  • Mental Health Benefits
  • Subsidized backup childcare

 

#LI-REMOTE

 

The base salary range for this role is listed below. The starting salary will be determined based on skills and experience. In addition to base salary, our total rewards components include cash compensation (overtime, bonus/commissions if eligible), equity, and benefits.
Pay Range
$135,000—$216,000 USD
The estimated Total Targeted Cash compensation range for this role is listed below. Total Targeted Cash for this role consists of a base salary plus the eligibility for equity and/or other benefits. In addition, this role qualifies for uncapped commissions. The starting salary will be determined based on skills, experience, and geographic location.
Total Targeted Cash
$155,000—$248,000 USD

We are Toasters

Diversity, Equity, and Inclusion is Baked into our Recipe for Success.

At Toast our employees are our secret ingredient. When they are powered to succeed, Toast succeeds.

The restaurant industry is one of the most diverse industries. We embrace and are excited by this diversity, believing that only through authenticity, inclusivity, high standards of respect and trust, and leading with humility will we be able to achieve our goals.

Baking inclusive principles into our company and diversity into our design provides equitable opportunities for all and enhances our ability to be first in class in all aspects of our industry.

Bready* to make a change? Apply today!

Toast is committed to creating an accessible and inclusive hiring process. As part of this commitment, we strive to provide reasonable accommodations for persons with disabilities to enable them to access the hiring process. If you need an accommodation to access the job application or interview process, please contact [email protected].