Platform Security Engineer

Platform Security Engineer

Owner is the all-in-one platform that restaurants use to succeed online. Thousands of restaurant owners use our tools to build their website, drive online orders, create their own branded app, manage their customer relationships, and set up marketing automations. You can think of it as Shopify meets HubSpot, but specifically for restaurants. Learn more about the problems we are solving for our customers here.

Our vision is to help independent restaurants succeed online. But it's not just restaurants that need our help. Most local businesses are struggling with these same problems. Huge technology corporations are taking their customers, bleeding their profits, and making it hard for them to survive. Once we nail the solution for restaurants we'll scale it into every other local business type. In the future we envision, tens of millions of local business owners will use our technology to succeed in the digital age.

In just over 3 years we've generated tens of millions in revenue, served millions of guests, and processed hundreds of millions of online orders. More importantly, we've helped thousands of restaurant owners save their businesses - and not only survive, but thrive.

Our team grew from under 100 to nearly 200 talented people in 2024. We've got top talent from the most successful companies in SMB software, including: Shopify, HubSpot, DoorDash, ServiceTitan, Rappi, Faire and Stripe. We'll be scaling even faster in 2025 to keep pace with our customer growth.

Owner is a remote-first, global company headquartered in San Francisco, with a sales hub in Toronto. For a few of our roles we prioritize in-person collaboration at one of our office locations. Most of our teammates are distributed throughout the globe. Please review the role description and discuss with your recruiter for more details on location.

We are seeking a highly skilled Platform Security Engineer. The Platform Security Engineer will work along side platform teams to build secure systems and tooling. This role will be focussed on securing our cloud infrastructure, CI/CD, and IAM across the entire organization. The other big focus for this roll will be developing Owner's alerting and detection capabilities. This role is 100% remote and can be based anywhere in the United States or Canada, or anywhere in Mexico or Colombia.

The Impact You Will Have

Secure Owner's Infrastructure Line

Enable teams to move fast without exposing Owner to additional risk.

Protect our customers by creating secure systems.

Make Owner's development process more delightful, efficient and secure.

Who You'll Work With

Engineering Teams

Customer Support Teams

This role has a company wide impact and will work cross functionally across the entire organization

What We're Looking For

Exceptional System Engineering Skills

Experience working with and building secure infrastructure and systems

Experience writing and deploying code in a production environment

Experience building effective alerting and detection

Experience designing and deploying secure implementations of IAM in AWS

Flexible problem solving

Strong written and verbal communication skills

Deep sense of personal ownership and accountability

Builder mentality

Nice To Haves

Experience with B to C business models and the associated security considerations.

Experience with detection and prevention of fraud / abuse.

Experience with payment security / financial security.

Experience with incident response and / or forensics.

K8s Experience

Pay And Benefits

The estimated base salary range for this role is $190,000-220,000, plus a generous pre-IPO equity package

Other benefits include comprehensive health coverage, remote-first workplace, unlimited PTO - plus extra fun perks!

Notice - Employment Scams

Communication from our team regarding job opportunities will only be made by an Owner team member with an @owner.com email address. We do not conduct interviews over email or chat platforms, and we will never ask you to provide personal or financial information such as your mailing address, social security number, credit card numbers or banking information. If you believe you are being contacted by scammer, please mark the communication as "phishing" or "spam" and do not respond.