{"id":19389,"url":"https://alion.io/job/olo-staff-security-engineer-blue-team","title":"Staff Security Engineer (Blue Team)","company":{"id":2662,"name":"Olo","domain":"olo.com","url":"https://alion.io/company/olo","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":80,"open_postings":5,"ghost_share":0,"stale_share":0.8,"repost_share":0,"time_to_fill_p50_days":59,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":146000,"max_usd":258000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":96},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"API Gateway","optional":false},{"name":"AWS","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"PCI DSS","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2025-12-19T19:30:59Z","employer_posted_date":"2025-12-19","last_verified_at":"2026-10-18T07:47:02Z","board_verified":true,"closed_at":null,"days_open":302,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":302},"description":"Olo is a leading SaaS platform accelerating digital transformation in the restaurant industry, by helping customers deliver more personalized and profitable guest experiences. As a result, our digital ordering, payment, and guest engagement solutions enable brands to do more with less and make every guest feel like a regular.\nReporting to the Security Engineering Director, the Staff Security Engineer will act as technical lead of the Olo Security Blue Team and work on security defences that allow our systems to keep running while protecting the data of our clients and their customers.\nAdditionally, you will help in the identification and prioritization of future project initiatives based on risk and execute on cross-functional projects with a high degree of ownership and excellence, all while actively mentoring other team members and elevating the collective team’s capabilities and skill sets. If you are passionate about reducing risk while supporting innovation we encourage you to apply!\nYou can work remotely from anywhere in the U.S. or at Olo's headquarters in NYC.\nWhat You'll Do\nGuide and coach Olo’s Blue Team on Information Protection, Incident Detection and Response and Service Delivery.\nYou will provide strategic and technical oversight to the team and the program.\nTechnically lead a team of security engineers and analysts who hunt, detect, and respond to internal and external threats.\nCollaborate with customers and partners to strengthen their security posture.\nDrive ongoing optimizations by implementing new technologies, replacing technologies, addressing evolving threats, scaling practices and automating security activities.\nUltimately you will keep team member and customers data safe by identifying and mitigating vulnerabilities and risks by providing actionable guidance to product teams.\nInformation Protection\nLead Olo’s Information Protection program including the selection, testing, implementation and maintenance of security tools and services, security awareness, service provider management and the ongoing testing of those controls.\nOversee Vulnerability Management program including vulnerability assessments, risk scoring and vulnerability resolution.\nOversee Threat Hunting program to detect and mitigate advanced threats.\nManage non-event driven security reviews, including concept reviews, design reviews, patching, firewall rules and system configuration checks.\nApply Web application and API security principles and techniques, such as zero trust, RBAC, authentication, authorization, auditing, rate limiting, challenges, etc., to protect our cloud-based services from unauthorized access and abuse.\nIncident Detection and Response\nOversee Incident Detection and Response program including ownership of incident response processes, tools and services and the ongoing continuous improvement of those controls.\nCoordinate the detection and response to attacks through all incident phases.\nEnsure incident reports are accurate, detailed and relevant.\nMonitor, detect, and remediate misconfigurations and security risks across our cloud environments. \nParticipate in a 24/7 on-call rotation.\nSecurity Services\nOversee Security Services program including security support requests, risk assessments, vendor assessments, PCI and SOC audit support and service provider management.\nWhat We'll Expect from You\n5+ years of Security Engineering, Security Operations or Security Architecture experience.\nCISSP, GCIH or similar certification preferred.\nExperience acting as technical lead to distributed teams consisting largely of remote engineers.\nExperience complying with PCI-DSS and other compliance and regulatory standards.\nExperience with attacker tactics, techniques and procedures.\nKnowledge of information technology, evolving threats, attack patterns, incident response and cyber security standards.\nExperience developing and leading incident response, remediation and mitigation activities, and providing status updates and reports.\nExperience analyzing security events to discern events that qualify as a legitimate security incident as opposed to non-incidents (ie. incident investigation, implementing countermeasures, and conducting incident response).\nDeep understanding of operating system, networking and application concepts.\nExperience hardening Windows, MacOS, Linux Containers and Kubernetes.\nFamiliarity with AWS security best practices and Infrastructure-as-Code.\nExperience deploying and maintaining security technologies. (e.g. Access Proxies, API Gateway, Anti-Malware, Application Control, Cloud Security Posture, Data Leak Prevention, Data Mapping, Endpoint Detection & Response, Intrusion Detection System, File Integrity Monitoring, Firewalls, Mobile Device Management, Multi Factor Authentication, SIEM, Static Inspection, Vulnerability Assessment, Web Proxies, WAF and Zero Trust).\nAdept at working with internal Product & Engineering, Legal, People & Culture, Finance and GTM teams and external partners, auditors and customers.\nAbility to work during critical incidents or to support coverage requirements.","description_format":"text","description_chars":5088,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","E-commerce Platforms","POS Systems","Catering & Food Services"],"lifecycle":[{"event":"open","at":"2025-12-19T19:30:59Z"}],"visa":[],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":1,"p_active":0.343,"p_room":0.28,"age_days":301,"expected_fill_days":59,"reasons":["conf:3","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/olo-staff-security-engineer-blue-team","json_url":"https://alion.io/job/olo-staff-security-engineer-blue-team.json","meta":{"generated_at":"2026-10-18T10:09:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15111,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2662},"rest":"https://alion.io/mcp/rest/get_company?id=2662"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Folo-staff-security-engineer-blue-team"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Folo-staff-security-engineer-blue-team"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Folo-staff-security-engineer-blue-team"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/olo-staff-security-engineer-blue-team\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Folo-staff-security-engineer-blue-team"}]}