Engineering Manager - Security (Blue Team)

Olo is a leading SaaS platform accelerating digital transformation in the restaurant industry by helping customers deliver more personalized and profitable guest experiences. As a result our digital ordering payment and guest engagement solutions enable hospitality at scale helping brands to do more with less and making every guest feel like a regular.

Reporting to the Security Engineering Director the Engineering Manager will lead the Blue Security Team and manage the security defenses that allow our systems to keep running while protecting the data of our clients and their customers.

You will help us fortify our defenses and protect the systems that allow millions of customers to order their food quickly and securely. We encourage you to apply if you are passionate about reducing risk while supporting innovation!

You can work remotely from anywhere in the U.S. or at Olo’s headquarters in NYC.

What You'll Do

• Guide and coach Olo’s Blue Team on Information Protection Incident Detection and Response and Service Delivery.

• You will recruit develop and scale a team of world-class security engineers providing strategic and tactical oversight to the team and the program.

• Support a team of security engineers and analysts who hunt detect and respond to internal and external threats.

• Collaborate with customers and partners to strengthen their security posture.

• Drive ongoing optimizations by implementing new technologies replacing technologies addressing evolving threats scaling practices and automating security activities.

• Ultimately you will keep team and customer data secure by identifying and mitigating vulnerabilities and risks by providing actionable guidance to product teams.

Information Protection

• Lead Olo’s Information Protection program including the selection testing implementation and maintenance of security tools and services security awareness service provider management and the ongoing testing of those controls

• Oversee Vulnerability Management program including vulnerability assessments risk scoring and vulnerability resolution.

• Oversee Threat Hunting program to detect and mitigate advanced threats

• Manage non-event-driven security reviews including concept reviews design reviews patching firewall rules and system configuration checks.

• Apply Web application and API security principles and techniques such as zero trust RBAC authentication authorization auditing rate limiting challenges etc. to protect our cloud-based services from unauthorized access and abuse

Incident Detection and Response

• Oversee Incident Detection and Response program including ownership of incident response processes tools and services and the ongoing continuous improvement of those controls.

• Coordinate the detection and response to attacks through all incident phases.

• Ensure incident reports are accurate detailed and relevant.

• Monitor detect and remediate misconfigurations and security risks across our cloud environments.

• Participate in a 24/7 on-call rotation.

Security Services

• Oversee Security Services program including security support requests risk assessments vendor assessments PCI and SOC audit support and service provider management.

What We'll Expect From You

• 5+ years of Security Engineering Security Operations or Security Architecture experience

• CISSP GCIH or similar certification preferred

• Experience managing distributed teams consisting largely of remote engineers

• Experience complying with PCI-DSS and other compliance and regulatory standards

• Experience with attacker tactics techniques and procedures

• Knowledge of information technology evolving threats attack patterns incident response and cyber security standards.

• Experience developing and leading incident response remediation and mitigation activities and providing status updates and reports.

• Experience analyzing security events to discern events that qualify as a legitimate security incident as opposed to non-incidents (ie. incident investigation implementing countermeasures and conducting incident response).

• Deep understanding of operating system networking and application concepts

• Experience hardening Windows MacOS Linux Containers and Kubernetes

• Familiarity with AWS security best practices and Infrastructure-as-Code

• Experience deploying and maintaining security technologies. (e.g. Access Proxies API Gateway Anti-Malware Application Control Cloud Security Posture Data Leak Prevention Data Mapping Endpoint Detection & Response Intrusion Detection System File Integrity Monitoring Firewalls Mobile Device Management Multi Factor Authentication SIEM Static Inspection Vulnerability Assessment Web Proxies WAF and Zero Trust).

• Adept at working with internal Product & Engineering Legal People & Culture Finance and GTM teams and external partners auditors and customers

• Ability to work during critical incidents or to support coverage requirements

About Olo

Olo (NYSE: OLO) is a leading restaurant technology provider with ordering payment and guest engagement solutions that help brands increase orders streamline operations and improve the guest experience. Each day Olo processes millions of orders on its open SaaS platform gathering the right data from each touchpoint into a single source—so restaurants can better understand and better serve every guest on every channel every time. Over 700 restaurant brands trust Olo and its network of more than 400 integration partners to innovate on behalf of the restaurant community accelerating technology’s positive impact and creating a world where every restaurant guest feels like a regular. Learn more at olo.com .

We’re remote-friendly. Since 2015 we have been evolving our culture to continue to support a more distributed workforce and now over 75% of our team works remotely across the U.S. If you're in the New York City area you can choose to work remotely or from Olo's headquarters on the 82nd floor of One World Trade Center.

We offer great benefits such as 20 days of paid time off 10 separate sick days 11 holidays plus year-end closure health dental and vision coverage for yourself and your family a 401k match remote-office stipend company equity a generous parental leave plan volunteer time off gift matching policy and more!

Our best estimate of the compensation range for this opportunity is $162k-230k annually depending on the experience you bring and your location. We look forward to discussing your salary expectations and our full total rewards offerings throughout the interview process.

We encourage you to apply!

We value diversity. At Olo we know a diverse and inclusive team makes our workplace better. Don't meet every single qualification in the job description? Market data shows that women and people of color are less likely to apply to jobs unless they meet every single qualification. We are dedicated to building a diverse inclusive and authentic workplace that is free from discrimination and harassment; this allows us to make better decisions and better serve the communities we’re a part of. So if you're excited about this role but your previous experience doesn't align perfectly with every qualification in the job description we encourage you to apply anyway. You may be just the right candidate for this or other roles.

All applicants receive consideration for employment. We do not discriminate on the basis of race religion color national origin gender identity sexual orientation pregnancy age marital status veteran status or disability status.

California Residents: CCPA notice