The posting
Role: Associate Cyber Security Engineer Hybrid Role, MUST BE BASED IN SAN DIEGO, CA
About Tillster Tillster, headquartered in the USA, is the global leader in digital ordering and customer engagement solutions. For over a decade, we have developed revolutionary self-service ordering and payment solutions – for mobile, tablet, online, kiosk, call center, and more – creating personalized interactions based on consumer preferences, language, and currency. Our platform is compatible with 15+ unique POS systems, representing over 90% coverage in multi-unit restaurants. We offer one platform; one scalable, enterprise-class solution – to create world-class digital engagement solutions.
Our mission and passion are one in the same: Empower restaurants and consumers to engage and transact anywhere, anytime, and from any device - one consumer at a time, one order at a time, billions of times over. In doing so, together we are transforming e-commerce in restaurants and make the till grow for Tillster and our customers.
Job Summary
The Associate Cyber Security Engineer is responsible for monitoring, detecting, analyzing, and responding to security threats across the organization’s systems and networks. This role is hands-on and operational, serving as the front line of defense by investigating alerts, responding to incidents, and supporting continuous improvement of the security program.
Key Responsibilities
Security Monitoring & Detection
- Monitor security alerts from SIEM, EDR, IDS/IPS, and other security tools
- Identify suspicious activity, anomalies, and potential security incidents
- Triage alerts and determine severity, scope, and impact
- Escalate incidents according to defined procedures
Incident Response & Investigation
- Investigate security events and confirm true positives
- Assist with containment, eradication, and recovery efforts
- Collect and preserve evidence for incident analysis
- Participate in post-incident reviews and lessons learned
Threat Analysis & Intelligence
- Analyze attacker techniques, tactics, and procedures (TTPs)
- Stay current on emerging threats and vulnerabilities
- Contribute to threat intelligence and detection improvements
- Recommend enhancements to alerting and response processes
Vulnerability & Risk Support
- Review vulnerability scan results and assist with validation
- Track remediation efforts and verify fixes
Security Awareness Training & Phishing
- Assist in developing, delivering, and maintaining security awareness training for employees, including onboarding and annual refresher content
- Plan, configure, and execute phishing simulation campaigns in coordination with senior team members
- Monitor and triage user-reported suspicious emails, escalating confirmed phishing attempts as security incidents
- Analyze phishing simulation and training results to identify high-risk users, departments, and trends
- Coordinate targeted follow-up training for users who repeatedly fail phishing simulations
- Track training completion and report security awareness program metrics to leadership
Documentation & Reporting
- Document incidents, investigations, and response actions
- Maintain runbooks, playbooks, and procedures
- Prepare reports and metrics for leadership and compliance needs
Collaboration & Support
- Work closely with Security Engineers, IT, and DevOps teams
- Provide guidance during active security incidents
- Support audits and compliance efforts (SOC 2, ISO 27001, PCI, etc.)
Success Metrics
Success in the Associate Cyber Security Engineer position will be evaluated based on performance against key objectives and measurable performance indicators, including, but not limited to:
1. Security Monitoring & Alert Triage – Monitor security tools and triage alerts accurately, consistently, and within established service levels.
2. Incident Investigation & Response Support – Investigate security events and support containment, eradication, and recovery efforts under the direction of senior team members.
3. Threat Analysis & Detection Improvement – Apply threat knowledge to strengthen alerting, detection, and response processes.
4. Vulnerability & Risk Management Support – Help validate vulnerabilities and track remediation through verified closure.
5. Security Awareness Training & Phishing – Support security awareness training and phishing simulation programs that measurably reduce human-related security risk.
6. Documentation & Reporting – Maintain accurate, complete, and timely security documentation and reporting.
7. Audit & Compliance Support – Support audit and compliance efforts, including SOC 2, ISO 27001, and PCI DSS.
8. Cross-Functional Collaboration – Partner effectively with Security Engineering, IT, and DevOps teams.
9. Professional Growth & Skill Development – Build technical depth and increasing independence across security operations.
These success metrics and performance indicators are intended to provide a framework for evaluating performance and are not exhaustive. The Company may establish, modify, replace, reprioritize, or adjust these metrics, thresholds, service levels, and performance expectations from time to time based on evolving business requirements, technologies, security risks, regulatory obligations, and operational needs. Performance will also be evaluated based on the overall responsibilities, conduct, judgment, collaboration, learning and development, and expectations of the position.
Pay and Benefits (USA)
- Salary is $65,000-$85,000
- Health Benefits: All full-time, regular employees and their dependents are eligible for medical, dental, vision and FSA benefits. Additional health benefits include Healthcare and Dependent Care reimbursement programs, Employee Assistance Program (“EAP”) and Optum Care 24-hour confidential medical counseling services.
- Holidays: The company observes ten (10) paid holidays per calendar year.
- Paid Time Off (PTO): Full-time, regular employees earn 15 days of PTO in the first 12-months of continuous service, and 22 days in subsequent years. Eligible part-time employees earn pro-rated PTO.
- Retirement: Effective with your employment start date, you will be eligible to participate in the 401(k) Plan.
- Education, Learning & Development: We offer college tuition and education assistance programs; Udemy Learning courses; and ongoing learning and development opportunities.
Local Candidates Only No Visa Sponsorship Principals only – no Agencies or calls please
