Senior Security Engineer, Enterprise Security

About the role

Braze is seeking a Senior Security Engineer to join our Enterprise Security team. This role requires a strong focus on enterprise security, network security, and endpoint security, with 5+ years of experience in a corporate security environment.

Responsibilities

• Design, implement, and manage security solutions to protect Braze's users and infrastructure
• Take an active role in developing, facilitating, and implementing security infrastructure designed to scale with the organization's growing needs
• Adapt to fast-paced developments in the Braze ecosystem and act as a secondary knowledge resource for other areas of security
• Work with diverse security professionals to solve first-in-industry security challenges and fill organizational use cases
• Collaborate with technical stakeholders to expand SIEM capabilities, configure detections, enhance alerting, and develop new processes
• Implement automation systems to assist in detections and reporting, and prioritize ingestion and maintain system operability
• Work with a team of security professionals to build new functionality that makes it easier, faster, and safer to build for a high-scale, growing customer base
• Participate in on-call rotations and respond to critical incidents and escalations
• Guide and perform security activities including vulnerability testing and analysis, design and implementation of new solutions/features, and investigation into security events
• Ensure teams are implementing applications/environments in compliance with defined security policies based on risk avoidance and security best practices
• Make recommendations on toolset and process modifications and improvements, and provide production IT security support
• Evaluate and recommend current and future technology solutions to mitigate risk to the business
• Participate in documentation and adherence to Security Policies and Operating Procedures

Qualifications

• 5+ years of Security Engineering experience with a strong focus on enterprise security, network security, and endpoint security
• 3+ years of experience working in a corporate security organization/environment with hands-on, technical, user-facing implementation
• A self-starter with great communication and organizational skills
• Professional experience with the modern tech stack and protecting SaaS applications, including Email, Mac endpoints, IAM, Crowdstrike EDR, Enterprise networking security (both endpoint and infra), and forensics
• Direct technical and hands-on experience with securing SaaS applications, conducting end-to-end security reviews, data flow analysis, technical architecture, authentication and authorization controls, and contractual security requirements
• Experience with Cloud security and AI security
• Technical Security Certifications that delve deeper than high-level concepts