Staff Security Engineer – Blue Team

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Serve as the technical leader of Olo’s Security Blue Team

• Mentor and guide the Blue Team in areas such as Information Protection, Incident Detection and Response, and Service Delivery

• Provide both strategic and technical direction to the security team and overall program

• Lead security engineers and analysts in the identification, detection, and response to both internal and external threats

• Collaborate with customers and partners to enhance security posture

• Implement technology enhancements, replace outdated technologies, address emerging threats, scale practices, and automate security operations

• Identify and reduce vulnerabilities and risks, offering actionable recommendations to product teams

• Direct the Information Protection program, which includes security tools, services, awareness, service providers, and control testing

• Manage vulnerability assessments, threat hunting, and non-event-driven security evaluations

• Apply principles of web application and API security, including zero trust, RBAC, authentication, authorization, auditing, and rate limiting

• Supervise Incident Detection and Response processes, tools, services, and ongoing improvements

• Coordinate detection and response throughout all phases of incidents

• Ensure incident reports are thorough, accurate, and pertinent

• Monitor, detect, and rectify misconfigurations and security risks across cloud platforms

• Participate in a 24/7 on-call rotation

• Oversee Security Services, including handling support requests, conducting risk assessments, vendor evaluations, and aiding in PCI and SOC audit support

• Mentor team members to enhance team capabilities

• Report directly to the Security Engineering Director

⛳️ Requirements

• Minimum of 5 years of experience in Security Engineering, Security Operations, or Security Architecture

• Preferred certifications include CISSP, GCIH, or similar

• Proven experience serving as the technical lead for distributed teams, primarily consisting of remote engineers

• Familiarity with compliance standards such as PCI-DSS and other regulatory requirements

• Knowledge of attacker tactics, techniques, and procedures

• Understanding of information technology, evolving threats, attack patterns, incident response, and cybersecurity standards

• Experience in developing and leading incident response, remediation, and mitigation efforts, including providing status updates and reports

• Ability to analyze security events to differentiate between legitimate security incidents and non-incidents

• Strong understanding of operating systems, networking, and application concepts

• Experience in hardening Windows, MacOS, Linux Containers, and Kubernetes

• Familiarity with AWS security best practices and Infrastructure-as-Code

• Experience in deploying and managing security technologies, including SIEM, WAF, firewalls, API gateways, vulnerability assessment tools, endpoint detection and response, zero trust, and related tools

• Capability to collaborate with Product & Engineering, Legal, People & Culture, Finance, GTM teams, external partners, auditors, and customers

• Willingness to work during critical incidents or fulfill support coverage needs

🏝️ Benefits

• Full-time employment

• Opportunity for remote work from any location within Northern Ireland