Cybersecurity Engineer

Restaurant365 is a SaaS company disrupting the restaurant industry! Our cloud-based platform provides a unique, centralized solution for accounting and back-office operations for restaurants. Restaurant365’s culture is focused on empowering team members to produce top-notch results while elevating their skills. We’re constantly evolving and improving to make sure we are and always will be “Best in Class” ... and we want that for you too!
As a Cybersecurity Engineer, your role will be to help drive Restaurant365’s information systems and networks to be more secure and compliant with all the relevant security policies and processes. The Cybersecurity Engineer will have extensive Security Operations experience and will build relationships with the Engineering organization, along with various departments to become a trusted partner for Cyber Security.  This position will also help design security testing strategies, conduct regular security reviews and identify risks. 

How you'll add value:

• Responsible for securing the infrastructure through working with the DevOps team to implement security best practices for cloud-based services.
• Working with the Dev teams to review security best practices for coding.    
• Build automated security checks for code promotion.  
• Security vulnerability scanning and remediation.    
• Conduct Internal and external pen tests.  
• Setup and configure security tools for: Monitoring and alerting, vulnerability scanning and security log analysis.  
• Monitor appropriate sources for new vulnerabilities, evaluate the risk such vulnerabilities pose to the organization’s information and systems, and advise management of appropriate measures to eliminate or reduce the organization’s risk or exposure to such vulnerabilities.
• Build metrics on security vulnerabilities and remediations.  
• Monitor organizational initiatives to ensure they adhere to security best practices.
• Contribute to the continued development of internal security control awareness in the organization.
• Manage security incidents and communication with stakeholders.  
• Participate in appropriate opportunities for continuing education, seminars, organizations, etc.  
• Other duties as assigned.

What you'll need to be successful in this role:

• 3+ years of experience with information technology security operations including: security incident management, vulnerability management, securing firewalls and networks. 
• SAST and DAST checks added to pipelines (DevSecOps). 
• Experienced in pen testing (Internal and External).
• Deep understanding of cloud infrastructure and security
• Industry certification preferred (e.g., CISA, CISM, CISSP, CRISC, GSNA, GLEG, etc.). 
• Familiarity with privacy laws, data protection/security regulations, written contract language and frameworks, such as AICPA SOC1 Type 2/SOC2 Type 2, CCPA, GDPR, HIPPA, and PCI DSS.
• Excellent time management and related organizational skills, including appropriate sense of urgency, a proactive approach, and a suitable ability to anticipate and manage project lifecycle events, issues and obstacles. 
• Negotiation skills needed to obtain internal commitments to remediate risks and vulnerabilities.
• Strong analytical skills to analyze risks, threats, evaluate control effectiveness and internal controls. 
• Excellent interpersonal and organizational skills; ability to analyze situations, respond independently, prioritize to meet deadlines, work under pressure, and be a team player while maintaining a positive attitude. 
• Excellent communication, listening and facilitation skills
• A willingness to mentor and guides fellow team members kindly and constructively. 
• A desire to share knowledge and teach others. 
• Be a good steward of our clients' data and of our business. 
• Bachelor’s and advanced degrees are preferred but not necessary for more experienced applicants. 
PREFERRED QUALIFICATIONS 
• Bachelor's degree, an advanced degree, or a combination of experience/education as a substitute for minimum education 
• Fast learner and self-starter  
• Attention to detail
• Energized by interacting with people throughout the day, both in person and via online channels of communication  
• Able to negotiate with teams to define implementation strategies that maximize compliance without impacting productivity
• Proficient at time management and prioritization of deadlines  
• Some level of experience and understanding of regulatory compliance frameworks such as SOX or PCI-DSS.  
• Experience with security frameworks such as SOC1 and SOC2, NIST CSF, CIS Cybersecurity Framework, NIST 800-53, and others.

R365 Team Member Benefits & Perks

• Compensation: Restaurant365 focuses on equit