Cybersecurity Engineer

Hybrid Role, MUST BE BASED IN SAN DIEGO, CA

Tillster, headquartered in the USA, is the global leader in digital ordering and customer engagement solutions. For over a decade, we have developed revolutionary self-service ordering and payment solutions – for mobile, tablet, online, kiosk, call center, and more – creating personalized interactions based on consumer preferences, language, and currency. Our platform is compatible with 15+ unique POS systems, representing over 90% coverage in multi-unit restaurants.

We offer one platform; one scalable, enterprise-class solution – to create world-class digital engagement solutions.

Our mission and passion are one in the same:
Empower restaurants and consumers to engage and transact anywhere, anytime, and from any device - one consumer at a time, one order at a time, billions of times over. In doing so together we are transforming e-commerce in restaurants and make the till grow for Tillster and our customers.

The Associate Cyber Security Engineer is responsible for monitoring, detecting, analyzing, and responding to security threats across the organization’s systems and networks. This role is hands‑on and operational, serving as the front line of defense by investigating alerts, responding to incidents, and supporting continuous improvement of the security program.

• Monitor security alerts from SIEM, EDR, IDS/IPS, and other security tools
• Identify suspicious activity, anomalies, and potential security incidents
• Triage alerts and determine severity, scope, and impact
• Escalate incidents according to defined procedures

• Investigate security events and confirm true positives
• Assist with containment, eradication, and recovery efforts
• Collect and preserve evidence for incident analysis
• Participate in post‑incident reviews and lessons learned

• Analyze attacker techniques, tactics, and procedures (TTPs)
• Stay current on emerging threats and vulnerabilities
• Contribute to threat intelligence and detection improvements
• Recommend enhancements to alerting and response processes

• Review vulnerability scan results and assist with validation
• Track remediation efforts and verify fixes

• Assist in developing, delivering, and maintaining security awareness training for employees, including onboarding and annual refresher content
• Plan, configure, and execute phishing simulation campaigns in coordination with senior team members
• Monitor and triage user-reported suspicious emails, escalating confirmed phishing attempts as security incidents
• Analyze phishing simulation and training results to identify high‑risk users, departments, and trends
• Coordinate targeted follow‑up training for users who repeatedly fail phishing simulations
• Track training completion and report security awareness program metrics to leadership

• Document incidents, investigations, and response actions
• Maintain runbooks, playbooks, and procedures
• Prepare reports and metrics for leadership and compliance needs

• Work closely with Security Engineers, IT, and Dev Ops teams
• Provide guidance during active security incidents
• Support audits and compliance efforts (SOC 2, ISO 27001, PCI, etc.)

Success in the Associate Cyber Security Engineer position will be evaluated based on performance against key objectives and measurable performance indicators, including, but not limited to:

1. Security Monitoring & Alert Triage – Monitor security tools and triage alerts accurately, consistently, and within established service levels.

2. Incident…