Senior Security Engineer, Enterprise Security

WHAT YOU'LL DO

As a Senior Security Engineer on the Enterprise Security team, you'll protect Braze employees, their devices, and our work locations. You'll investigate malware and advanced threats, secure our SaaS applications, harden internal configurations, propose security architecture improvements, and build the alerts and reports that keep the team ahead of risk.

You'll own core security infrastructure that sits at the center of Enterprise Security operations and works closely with Cloud Security, App Security, and Information Technology. That means developing and enforcing policies, expanding our SIEM capabilities with partners across the business, and evaluating vendor and partner technologies for security gaps.

Your day-to-day spans threat and malware investigations, SaaS security, AI security, architecture review, MDM, communications management, and vulnerability remediation. You'll secure communications, support compliance efforts, and automate wherever it reduces toil. You'll work both independently and cross-functionally, and you'll mentor junior engineers on security fundamentals. You’ll have the opportunity to implement DLP where needed as well as secure AI as it develops and is used to drive business function.

As a senior team member, you'll help build functionality for a high-scale, growing customer base, collaborate with diverse security professionals, address unique security challenges, participate in on-call rotations, and respond to critical incidents.

Responsibilities:

• Design, implement, and operate security solutions that protect Braze's employees, devices, and infrastructure, scaling them as the organization grows
• Expand SIEM and automation capabilities: build and tune detections, improve alerting, and automate detection and reporting pipelines, including prioritizing data ingestion and keeping systems healthy
• Review and govern MCP and AI agent integrations, set controls for AI-assisted coding environments, and define policy for autonomous AI tooling across the company
• Secure SaaS applications and internal systems through policy design, control enforcement, and configuration hardening
• Lead security activities across the enterprise stack, including vulnerability testing and analysis, security event investigation, and evaluation of new tools and technologies to reduce business risk
• Serve as a key decision maker on internal product and system deployments, and ensure teams build in line with security policy and best practice
• Act as a secondary resource for adjacent domains, (AppSec, compliance, cloud security, system security) in a fast-moving environment
• Participate in an on-call rotation and partner with IT, Devops, Escalations, and other members of security to respond to critical incidents and escalations
• Experience maintaining corporate MDM on macbooks, and mobile devices
• Experience in scripting and light coding
• Investigate and respond to malware, social engineering, and phishing independently
• This role is a key decision maker regarding internal product and system deployments
• Mature our Zero Trust environment and serve as the subject-matter expert on proxy, network, and VPN considerations

WHO YOU ARE

Qualifications:

• 5+ years of Security Engineering experience with a strong focus on enterprise security, network security, endpoint security
• 4+ years of experience working in a corporate security organization/environment with hands on, technical, user facing implementation
• Prior experience working as a technical authority in a team environment, deep hands-on technical expertise, not just admin-level familiarity. You understand how the technology works internally and what goes on behind the scenes
• Professional experience with the modern tech stack and protecting SaaS applications. Direct technical and hands on experience with securing Email, Mac endpoints, IAM ( okta and Gsuite ), Crowdstrike EDR, SOAR, Enterprise networking security ( both endpoint and infra ), and Forensics
• Past experience conducting end-to-end security reviews of SaaS applications, Data access and movement, Technical architecture, authentication and authorization controls, and contractual security requirements, to ensure third-party tools meet organizational security standards
• Past experience leading the design, implementation, and continuous tuning of security programs across laptop endpoint and networks; leading policy development, incident triage, data classification alignment, and cross-functional collaboration to prevent unauthorized exfiltration of sensitive data
• A self-starter with great communication and organizational skills

Bonus:

• Forensics experience
• Cloud security experience
• Technical Security Certifications that delve deeper than high level concepts
• Experience with being a foundational security engineer and/or building a new security team ground up

For candidates based in the United States, the pay range for this position at the start of employment is expected to be between $128,900 and $180,000/year with an expected On Target Earnings (OTE) between $143,200 and $200,000/year (including bonus or commission). Your exact offer may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. In addition to cash compensation, this role qualifies for a comprehensive Total Rewards package that includes equity grants of restricted stock (RSUs) so that you will own a piece of our company.