Staff Security Engineer – Blue Team

🔥 3 minutes ago

🇬🇧 United Kingdom – Remote

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Olo

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2005

🍽️ Food & Beverage

🏨 Hospitality

💼 Consulting

💰 $103.3M Post-IPO Equity on 2021-11

Food & Beverage • Hospitality • Consulting

Olo is a restaurant technology platform that helps restaurants streamline their operations, enhance guest experiences, and increase sales. It provides comprehensive solutions for online ordering, delivery, catering, payment processing, and guest engagement through its fully integrated systems. Olo enables restaurants to leverage guest data to improve marketing strategies and optimize service through features like the Guest Data Platform and personalized marketing solutions. By using Olo, restaurants can manage digital orders, reduce fraud, and benefit from insights that drive growth and profitability. With a focus on online sales and customer relationship management, Olo partners with over 700 restaurant brands to enhance their digital capabilities and facilitate profitable growth.

📋 Description

• Act as technical lead of Olo’s Security Blue Team • Guide and coach the Blue Team on Information Protection, Incident Detection and Response, and Service Delivery • Provide strategic and technical oversight to the security team and program • Technically lead security engineers and analysts hunting, detecting and responding to internal and external threats • Collaborate with customers and partners to strengthen security posture • Implement technology optimizations, replace technologies, address evolving threats, scale practices and automate security activities • Identify and mitigate vulnerabilities and risks and provide actionable guidance to product teams • Lead the Information Protection program, including security tools, services, awareness, service providers and control testing • Oversee vulnerability management, threat hunting and non-event-driven security reviews • Apply web application and API security principles including zero trust, RBAC, authentication, authorization, auditing and rate limiting • Oversee Incident Detection and Response, including processes, tools, services and continuous improvement • Coordinate detection and response through all incident phases • Ensure incident reports are accurate, detailed and relevant • Monitor, detect and remediate misconfigurations and security risks across cloud environments • Participate in a 24/7 on-call rotation • Oversee Security Services, including support requests, risk assessments, vendor assessments, PCI and SOC audit support and service provider management • Mentor team members and elevate team capabilities • Report to the Security Engineering Director

🎯 Requirements

• 5+ years of Security Engineering, Security Operations or Security Architecture experience • CISSP, GCIH or similar certification preferred • Experience acting as technical lead to distributed teams consisting largely of remote engineers • Experience complying with PCI-DSS and other compliance and regulatory standards • Experience with attacker tactics, techniques and procedures • Knowledge of information technology, evolving threats, attack patterns, incident response and cybersecurity standards • Experience developing and leading incident response, remediation and mitigation activities, and providing status updates and reports • Experience analyzing security events to discern legitimate security incidents from non-incidents • Deep understanding of operating system, networking and application concepts • Experience hardening Windows, MacOS, Linux Containers and Kubernetes • Familiarity with AWS security best practices and Infrastructure-as-Code • Experience deploying and maintaining security technologies, including SIEM, WAF, firewalls, API gateways, vulnerability assessment, endpoint detection and response, zero trust, and related tools • Ability to work with Product & Engineering, Legal, People & Culture, Finance and GTM teams, external partners, auditors and customers • Ability to work during critical incidents or support coverage requirements

🏖️ Benefits

• Full-time employment • Remote work from anywhere in Northern Ireland