Senior Security Engineer

WHAT YOU'LL DO

As a Senior Security Engineer on the Enterprise Security team, you'll protect Braze employees, their assets, and work locations using various tools and technologies. Your responsibilities include investigating malware and advanced threats, implementing DLP in a variety of solutions, securing SAAS applications, hardening internal configurations, proposing security architecture enhancements, and developing alerts & reports.

In this role you will build, maintain, and document essential security infrastructure operating at the center of cloud operations, product, app security, and system architecture. That includes developing and enforcing policies, collaborating with other business units to enhance SIEM capabilities, and reviewing business partner technologies for security improvements.

This role allows for collaboration with technical stakeholders to further expand upon forensics, Threat investigations, Malware investigations, IAM, SSO, MDM, password management, and vulnerability remediation. Take charge of securing communications, facilitating compliance, and deploying automation. You'll operate independently and collaboratively to implement protective systems and mentor junior associates in security concepts.

As a senior team member, you'll help build functionality for a high-scale, growing customer base, collaborate with diverse security professionals, address unique security challenges, participate in on-call rotations, and respond to critical incidents.

On-call rotation and working with Security and Engineering resources to help respond to critical incidents and escalations is an active part of this role.

Responsibilities:

• As a Senior Security Engineer - Enterprise security, your primary focus will be to Design, implement, and manage security solutions to protect Braze’s users and infrastructure
• You will need an in-depth understanding of enterprise networking, architecture, and modern user & cloud tech stack. You will be responsible for taking an active role in developing, facilitating, and implementing security infrastructure designed to scale with the organizations growing needs
• You will need an in-depth understanding of enterprise networking, architecture, and modern user & cloud tech stack. You will be responsible for taking an active role in developing, facilitating, and implementing security infrastructure designed to scale with the organizations growing needs
• You will need to be adaptable. The braze ecosystem develops fast and at times you will act as a secondary knowledge resource for other areas of security including app sec, compliance, cloud security, and system security
• You will be working to help expand SIEM capabilities by configuring detections and enhancing alerting. You will be working within SaaS applications and automation technologies to develop and document new processes, implement policy control and enforcement, and align with key business stake holders to drive security initiatives
• You will have the freedom to implement automation systems to assist in detections and reporting, and be responsible for prioritizing ingestion and maintaining system operability
• As a senior member of the team, you will work with us to build new functionality that will make it easier, faster, and safer to build for a high scale, growing customer base, and expanding technology footprint
• You will be working with a team of security professionals from varied backgrounds to solve first-in-industry security challenges and fill the use cases of our organization
• You will also be a part of an on-call rotation and work with Security and Engineering resources to help respond to critical incidents and escalations regarding your responsible domain
• This role is a key decision maker regarding internal product and system deployments
• Guide and perform security activities including vulnerability testing and analysis, design and implementation of new solutions/features and investigation into security events
• Ensure teams are implementing applications/environments in compliance of defined security policies based on risk avoidance and security best practices
• Make recommendations on toolset and process modifications and improvements and production IT security support
• Perform the Evaluation and Recommendation of current and future technology solutions to mitigate risk to the business
• Participate in documentation and adherence to Security Policies and Operating Procedures

WHO YOU ARE

Qualifications:

• 5+ years of Security Engineering experience with a strong focus on enterprise security, network security, endpoint security
• 3+ years of experience working in a corporate security organization/environment with hands on, technical, user facing implementation
• Prior experience working as a technical authority in a team environment
• A self-starter with great communication and organizational skills
• Professional experience with the modern tech stack and protecting SaaS applications. Direct technical and hands on experience with securing Email, Mac endpoints, IAM, Crowdstrike EDR, Enterprise networking security ( both endpoint and infra ), and forensics
• Conduct end-to-end security reviews of SaaS applications, data flow analysis, Technical architecture, authentication and authorization controls, and contractual security requirements, to ensure third-party tools meet organizational security standards
• Lead the design, implementation, and continuous tuning of forensics, programs across endpoints, networks, and cloud environments, including policy development, incident triage, data classification alignment, and cross-functional collaboration to prevent unauthorized exfiltration of sensitive data

Bonus:

• Cloud security experience
• AI security
• Technical Security Certifications that delve deeper than high level concepts

For candidates based in the United States, the pay range for this position at the start of employment is expected to be between $128,900 and $180,000/year with an expected On Target Earnings (OTE) between $143,200 and $200,000/year (including bonus or commission). Your exact offer may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. In addition to cash compensation, this role qualifies for a comprehensive Total Rewards package that includes equity grants of restricted stock (RSUs) so that you will own a piece of our company.