Role: Associate Cyber Security Engineer

Hybrid Role, MUST BE BASED IN SAN DIEGO, CA

About Tillster

Tillster, headquartered in the USA, is the global leader in digital ordering and customer engagement solutions. For over a decade, we have developed revolutionary self-service ordering and payment solutions – for mobile, tablet, online, kiosk, call center, and more – creating personalized interactions based on consumer preferences, language, and currency. Our platform is compatible with 15+ unique POS systems, representing over 90% coverage in multi-unit restaurants. We offer one platform; one scalable, enterprise-class solution – to create world-class digital engagement solutions.

Our mission and passion are one in the same: Empower restaurants and consumers to engage and transact anywhere, anytime, and from any device - one consumer at a time, one order at a time, billions of times over. In doing so, together we are transforming e-commerce in restaurants and make the till grow for Tillster and our customers.

Job Summary

The Associate Cyber Security Engineer is responsible for monitoring, detecting, analyzing, and responding to security threats across the organization’s systems and networks. This role is hands-on and operational, serving as the front line of defense by investigating alerts, responding to incidents, and supporting continuous improvement of the security program.

Key Responsibilities

Security Monitoring & Detection

Monitor security alerts from SIEM, EDR, IDS/IPS, and other security tools

Identify suspicious activity, anomalies, and potential security incidents

Triage alerts and determine severity, scope, and impact

Escalate incidents according to defined procedures

Incident Response & Investigation

Investigate security events and confirm true positives

Assist with containment, eradication, and recovery efforts

Collect and preserve evidence for incident analysis

Participate in post-incident reviews and lessons learned

Threat Analysis & Intelligence

Analyze attacker techniques, tactics, and procedures (TTPs)

Stay current on emerging threats and vulnerabilities

Contribute to threat intelligence and detection improvements

Recommend enhancements to alerting and response processes

Vulnerability & Risk Support

Review vulnerability scan results and assist with validation

Track remediation efforts and verify fixes

Security Awareness Training & Phishing

Assist in developing, delivering, and maintaining security awareness training for employees, including onboarding and annual refresher content

Plan, configure, and execute phishing simulation campaigns in coordination with senior team members

Monitor and triage user-reported suspicious emails, escalating confirmed phishing attempts as security incidents

Analyze phishing simulation and training results to identify high-risk users, departments, and trends

Coordinate targeted follow-up training for users who repeatedly fail phishing simulations

Track training completion and report security awareness program metrics to leadership

Documentation & Reporting

Document incidents, investigations, and response actions

Maintain runbooks, playbooks, and procedures

Prepare reports and metrics for leadership and compliance needs

Collaboration & Support

Work closely with Security Engineers, IT, and DevOps teams

Provide guidance during active security incidents

Support audits and compliance efforts (SOC 2, ISO 27001, PCI, etc.)

Success Metrics

Success in the Associate Cyber Security Engineer position will be evaluated based on performance against key objectives and measurable performance indicators, including, but not limited to:

1. Security Monitoring & Alert Triage – Monitor security tools and triage alerts accurately, consistently, and within established service levels.

2. Incident Investigation & Response Support – Investigate security events and support containment, eradication, and recovery efforts under the direction of senior team members.

3. Threat Analysis & Detection Improvement – Apply threat knowledge to strengthen alerting, detection, and response processes.