Staff Security Engineer - Blue Team (US)

The role

This person will act as technical lead of Olo's Blue Team, guiding security engineers and analysts who hunt, detect and respond to threats. The role covers information protection, incident detection and response, and security services for Olo's SaaS platform.

What you will do

• Guide and coach the Blue Team on Information Protection, Incident Detection and Response and Service Delivery
• Lead the Information Protection program, including security tools, awareness, service provider management and control testing
• Oversee the vulnerability management and threat hunting programs
• Oversee the incident detection and response program and coordinate responses through all incident phases
• Monitor, detect and remediate misconfigurations and security risks across cloud environments
• Oversee security services, including risk and vendor assessments and PCI and SOC audit support
• Collaborate with customers and partners to strengthen their security posture
• Drive optimizations by implementing and replacing technologies and automating security activities
• Identify and prioritize future project initiatives based on risk
• Provide actionable security guidance to product teams

Required qualifications

• 5+ years of Security Engineering, Security Operations or Security Architecture experience
• Experience acting as technical lead to distributed teams, largely of remote engineers
• Experience complying with PCI-DSS and other compliance and regulatory standards
• Experience with attacker tactics, techniques and procedures
• Experience leading incident response, remediation and mitigation, and providing status reports
• Experience analyzing security events to identify legitimate incidents
• Deep understanding of operating system, networking and application concepts
• Experience hardening Windows, macOS, Linux containers and Kubernetes
• Familiarity with AWS security best practices and Infrastructure-as-Code
• Experience deploying and maintaining security technologies such as SIEM, EDR, WAF, firewalls and zero trust tools
• Ability to work with internal teams, external partners, auditors and customers
• Ability to work during critical incidents or to support coverage requirements

Nice to have

• CISSP, GCIH or similar certification

Benefits

• 20 days of paid time off
• 10 sick days
• 11 holidays plus year-end closure
• Health, dental and vision coverage for yourself and your family
• 401k match
• Remote-office stipend
• Generous parental leave plan
• Volunteer time off
• Gift matching policy

Before you apply

• Offers work from anywhere in the U.S. or at the NYC headquarters

About the company

Olo is a restaurant technology provider with ordering, payment and guest engagement solutions. It processes millions of orders each day on its open SaaS platform for over 800 restaurant brands.