Engineering Manager, Security (Blue Team)

Reporting to the Security Engineering Director, the Security Engineering Manager will lead the Blue Team and manage the security defenses that enable our systems to continue operating while protecting the data of our clients and their customers. You will help us fortify our defenses and protect the systems that allow people to order their food quickly and securely. Guide and coach Olo’s Blue Team on Information Protection, Incident Detection and Response and Service Delivery. You will recruit, develop and scale a team of world class security engineers; providing strategic and tactical oversight to the team and the program. Support a team of security engineers and analysts who hunt, detect, and respond to internal and external threats. Collaborate with customers and partners to strengthen their security posture. Drive ongoing optimizations by implementing new technologies, replacing technologies, addressing evolving threats, scaling practices and automating security activities. Ultimately you will keep team member and customers data safe by identifying and mitigating vulnerabilities and risks by providing actionable guidance to product teams. Lead Olo’s Information Protection program including the selection, testing, implementation and maintenance of security tools and services, security awareness, service provider management and the ongoing testing of those controls. Oversee Vulnerability Management program including vulnerability assessments, risk scoring and vulnerability resolution. Oversee Threat Hunting program to detect and mitigate advanced threats. Manage non-event driven security reviews, including concept reviews, design reviews, patching, firewall rules and system configuration checks. Apply Web application and API security principles and techniques, such as zero trust, RBAC, authentication, authorization, auditing, rate limiting, challenges, etc., to protect our cloud-based services from unauthorized access and abuse. Coordinate the detection and response to attacks through all incident phases. Ensure incident reports are accurate, detailed and relevant. Monitor, detect, and remediate misconfigurations and security risks across our cloud environments.