Senior Corporate Security Engineer

<p>Toast creates technology to help restaurants and local businesses succeed in a digital world, helping business owners operate, increase sales, engage customers, and keep employees happy.</p> <p>Toast is seeking a Senior Security Engineer to design, implement, and operate enterprise Data Loss Prevention and Secure Access Service Edge capabilities. The role will reduce data exfiltration risk, enable secure access to web, SaaS, private applications, and cloud services, and improve security coverage.</p> <p>You will be a senior individual contributor and subject matter expert, within the Enterprise Security team and will closely partner with IT, Network Engineering, Legal, Privacy, Compliance, and application owners. Success requires hands-on engineering, design, operational ownership, and clear risk communication.</p> <p><strong>A day in the life (Responsibilities)&nbsp;<br></strong></p> <h5><strong>Data Loss Prevention Engineering</strong></h5> <ul> <li>Own the DLP engineering roadmap and control lifecycle, from requirements and architecture through proof of concept, testing, phased deployment, tuning, operations, and continuous improvement.</li> <li>Design and operate controls for sensitive data across managed endpoints, email, web and network channels, SaaS and collaboration applications, cloud environments, and data repositories.</li> <li>Build and maintain data discovery and classification logic using sensitive information types, regular expressions, data matching, document fingerprinting, OCR, and machine learning where appropriate.</li> <li>Translate requirements into precise policies and response actions with documented exceptions.</li> <li>Establish safe policy rollout practices with test cases, pilot groups, change control, user impact analysis, exception review, and measurable acceptance criteria.</li> <li>Triage and investigate DLP alerts and incidents, determine root cause and business context, coordinate containment and remediation, and reduce false positives without weakening protection.</li> <li>Integrate DLP with SASE services, SIEM/SOAR platforms, MDM, ticketing systems, data classification, data security posture management, and relevant response workflows.</li> <li>Define dashboards and metrics for coverage, control effectiveness, detection precision, recurring exfiltration paths, policy exceptions, incident volume, and time to resolution.</li> </ul> <h5><strong>Secure Access Service Edge Engineering</strong></h5> <ul> <li>Engineer and operate scalable SASE capabilities for corporate fleet, SaaS, private apps, and cloud environments.</li> <li>Configure and optimize core capabilities including secure web gateway, cloud access security broker, zero trust network access, firewall as a