Staff Security Engineer - Blue Team
Job description
Staff Security Engineer acting as technical lead of Olo's Security Blue Team, overseeing information protection, incident detection and response, and security services programs. The role focuses on reducing risk while supporting innovation across Olo's cloud-based restaurant SaaS platform.
At a glance
- Work mode
- Remote · Northern Ireland
What you'll do
- Guide and coach Olo's Blue Team on Information Protection, Incident Detection and Response and Service Delivery
- Provide strategic and technical oversight to the team and the program
- Technically lead a team of security engineers and analysts who hunt, detect, and respond to internal and external threats
- Collaborate with customers and partners to strengthen their security posture
- Drive ongoing optimisations by implementing new technologies, replacing technologies, addressing evolving threats, scaling practices and automating security activities
- Keep team member and customer data safe by identifying and mitigating vulnerabilities and risks by providing actionable guidance to product teams
- Lead Olo's Information Protection program including the selection, testing, implementation and maintenance of security tools and services, security awareness, service provider management and the ongoing testing of those controls
- Oversee Vulnerability Management program including vulnerability assessments, risk scoring and vulnerability resolution
- Oversee Threat Hunting program to detect and mitigate advanced threats
- Manage non-event driven security reviews, including concept reviews, design reviews, patching, firewall rules and system configuration checks
- Apply Web application and API security principles and techniques, such as zero trust, RBAC, authentication, authorization, auditing, rate limiting, challenges, etc., to protect cloud-based services from unauthorized access and abuse
- Oversee Incident Detection and Response program including ownership of incident response processes, tools and services and the ongoing continuous improvement of those controls
- Coordinate the detection and response to attacks through all incident phases
- Ensure incident reports are accurate, detailed and relevant
- Monitor, detect, and remediate misconfigurations and security risks across cloud environments
- Participate in a 24/7 on-call rotation
- Oversee Security Services program including security support requests, risk assessments, vendor assessments, PCI and SOC audit support and service provider management
What we're looking for
- 5+ years of Security Engineering, Security Operations or Security Architecture experience
- Experience acting as technical lead to distributed teams consisting largely of remote engineers
- Experience complying with PCI-DSS and other compliance and regulatory standards
- Experience with attacker tactics, techniques and procedures
- Knowledge of information technology, evolving threats, attack patterns, incident response and cyber security standards
- Experience developing and leading incident response, remediation and mitigation activities, and providing status updates and reports
- Experience analyzing security events to discern events that qualify as a legitimate security incident as opposed to non-incidents (ie. incident investigation, implementing countermeasures, and conducting incident response)
- Deep understanding of operating system, networking and application concepts
- Experience hardening Windows, MacOS, Linux Containers and Kubernetes
- Familiarity with AWS security best practices and Infrastructure-as-Code
- Adept at working with internal Product & Engineering, Legal, People & Culture, Finance and GTM teams and external partners, auditors and customers
- Ability to work during critical incidents or to support coverage requirements
Nice to have
- CISSP, GCIH or similar certification preferred
Your team
Security Blue Team
Team of security engineers and analysts who hunt, detect, and respond to internal and external threats
Apply
Direct apply at Olo
Opens the job posting at Olo
About Olo
A leading SaaS platform accelerating digital transformation in the restaurant industry
Olo is a leading restaurant technology provider with ordering, payment, and guest engagement solutions that help brands increase orders, streamline operations, and improve the guest experience. Each day, Olo processes millions of orders on its open SaaS platform, gathering the right data from each touchpoint into a single source—so restaurants can better understand and better serve every guest on every channel, every time.
Key facts
- Restaurant technology / SaaS
- Processes millions of orders daily on its open SaaS platform
- Over 800 restaurant brands trust Olo
- Network of more than 400 integration partners