Senior Security Engineer, Enterprise Security

About the role

The Senior Security Engineer on the Enterprise Security team at Braze is responsible for designing, implementing, and managing security solutions to protect Braze's users and infrastructure. This role involves taking an active role in developing, facilitating, and implementing security infrastructure that scales with the organization's growing needs.

Responsibilities

• Design, implement, and manage security solutions to protect Braze’s users and infrastructure
• Take an active role in developing, facilitating, and implementing security infrastructure designed to scale with the organization's growing needs
• Adapt to fast-changing Braze ecosystem and act as a secondary knowledge resource for other areas of security including app sec, compliance, cloud security, and system security
• Work with diverse security professionals to solve first-in-industry security challenges and fill the use cases of our organization
• Participate in on-call rotations and respond to critical incidents and escalations
• Guide and perform security activities including vulnerability testing and analysis, design and implementation of new solutions/features, and investigation into security events
• Ensure teams are implementing applications/environments in compliance with defined security policies based on risk avoidance and security best practices
• Make recommendations on toolset and process modifications and improvements and provide production IT security support
• Evaluate and recommend current and future technology solutions to mitigate risk to the business
• Participate in documentation and adherence to Security Policies and Operating Procedures

Qualifications

• 5+ years of Security Engineering experience with a strong focus on enterprise security, network security, endpoint security
• 3+ years of experience working in a corporate security organization/environment with hands-on, technical, user-facing implementation
• A self-starter with great communication and organizational skills
• Professional experience with the modern tech stack and protecting SaaS applications. Direct technical and hands-on experience with securing Email, Mac endpoints, IAM, Crowdstrike EDR, Enterprise networking security (both endpoint and infra), and forensics
• Experience conducting end-to-end security reviews of SaaS applications, data flow analysis, technical architecture, authentication and authorization controls, and contractual security requirements, to ensure third-party tools meet organizational security standards
• Lead the design, implementation, and continuous tuning of forensics, programs across endpoints, networks, and cloud environments, including policy development, incident triage, data classification alignment, and cross-functional collaboration to prevent unauthorized exfiltration of sensitive data

Bonus

• Cloud security experience
• AI security
• Technical Security Certifications that delve deeper than high-level concepts