Product Security Engineer II

View full description

Requirements:

• Strong grasp of common web vulnerabilities and how to mitigate them.
• Proficiency in at least one programming language (Kotlin, Java, Python, Go, C#, etc.).
• Experience with security tools like static/dynamic analysis scanners and web proxies.
• Solid understanding of cloud application architecture, network security, and secure coding practices.
• Excellent communication skills - can explain complex security concepts to both technical and non-technical audiences.

Responsibilities:

• Identify, triage, and provide remediation guidance for application vulnerabilities.
• Improve developer tooling and adoption to build a more robust SSDLC.
• Assist incident response teams with application security expertise and tools.
• Think like an attacker to identify weaknesses in application architecture.
• Collaborate with developers to bake security into products.
• Research emerging security trends and technologies.
• Contribute to Toast's Security Community of Practice.