Senior Corporate Security Engineer

About this job

Toast creates technology to help restaurants and local businesses succeed in a digital world by helping owners operate, increase sales, engage customers, and keep employees happy. As a Senior Corporate Security Engineer at Toast in Bengaluru, you will join the Enterprise Security team as a senior individual contributor and subject matter expert. The role focuses on designing, implementing, and operating enterprise Data Loss Prevention and Secure Access Service Edge capabilities to reduce data exfiltration risk, secure access to web, SaaS, private applications, and cloud services, and improve overall security coverage. You will partner closely with IT, Network Engineering, Legal, Privacy, Compliance, and application owners. A normal day involves hands-on engineering, architecture design, operational ownership, tuning detection policies, investigating alerts, and communicating risk effectively across teams.

Responsibilities

• Own the DLP engineering roadmap and control lifecycle from architecture to deployment, tuning, and continuous improvement.
• Design and operate controls for sensitive data across endpoints, email, web, network channels, SaaS, and cloud environments.
• Build and maintain data discovery and classification logic using regex, document fingerprinting, OCR, and machine learning.
• Triage and investigate DLP alerts, determine root cause, coordinate remediation, and reduce false positives.
• Engineer and operate scalable SASE capabilities for the corporate fleet, SaaS, private apps, and cloud environments.
• Configure core SASE capabilities including SWG, CASB, ZTNA, FWaaS, DNS security, and remote browser isolation.
• Manage traffic steering and connectivity patterns such as endpoint clients, proxy configurations, and tunnels.
• Lead phased migrations from legacy VPN, proxy, and perimeter security solutions while maintaining service continuity.

Requirements

• Bachelor's degree in Engineering, Cybersecurity, or equivalent practical experience.
• 7+ years of experience, including substantial hands-on responsibility in enterprise security engineering environments.
• Ability to architect, deploy, tune, and operate at least one major enterprise DLP platform with strong data discovery knowledge.
• Ability to design, implement, migrate, and operate at least one major SASE/SSE platform with practical SWG, CASB, and ZTNA knowledge.
• Experience assessing, prioritizing, tracking, and validating security remediations.
• Developer and automation mindset with skills in Python or a comparable language, REST APIs, and automation platforms.
• Working knowledge of AI-assisted dev tools such as Claude, Copilot, or Codex.
• Excellent communication skills and sound judgment.

Good to have

• Master's degree in Computer Science, Cybersecurity, Information Security, or a related discipline.
• Experience integrating security controls with platforms like Splunk, Datadog, Torq, or Palo Alto Cortex XSOAR.
• Experience applying AI to improve security detection, policy engineering, investigation, or operational efficiency.
• Working knowledge of NIST Cybersecurity Framework, CIS Controls, and zero trust principles.
• Relevant certifications such as CISSP, CISM, CCSP, Security+, Network+, or vendor certifications.

Who should apply

This role suits experienced cybersecurity professionals with a strong background in enterprise security engineering, specifically in Data Loss Prevention and SASE platforms. Candidates should have at least 7 years of relevant experience, hands-on programming skills in Python, and strong collaboration abilities. Professionals who thrive in environments combining security architecture, automation, and cross-functional partnerships with IT and legal teams will find this position ideal. Freshers should not apply as 7+ years of experience is required.

Frequently asked questions