Senior Security Engineer, Enterprise Security

WHAT YOU'LL DO

As a Senior Security Engineer on the Enterprise Security team, you'll protect Braze employees, their devices, and our work locations. This is a specialist level opportunity where you’ll investigate malware and advanced threats, secure our SaaS applications, harden internal configurations, propose security architecture improvements, and build the alerts and reports that keep the team ahead of risk.

You'll own core security infrastructure that sits at the center of Enterprise Security operations and works closely with Cloud Security, App Security, and Information Technology. That means developing and enforcing policies, expanding our SIEM capabilities with partners across the business, and evaluating vendor and partner technologies for security gaps.

This role allows for collaboration with technical stakeholders to further expand upon DLP, Integration & 3rd party Saas application review, Shadow AI, MDM, and vulnerability remediation. Take charge of securing communications, facilitating compliance, and deploying automation. You'll operate both independently and collaboratively to implement protective systems.

As a senior team member, you'll help build functionality for a high-scale, growing customer base, collaborate with diverse security professionals, address unique security challenges, participate in on-call rotations, and respond to critical incidents.

Main responsibilities:

• Design, implement, and operate enterprise security controls across endpoints (macOS-heavy), identity and access management, network, and email
• Lead the Data Loss Prevention program end to end: policy design, classification alignment, tuning, and incident triage across endpoint, network, and cloud
• Conduct security reviews of third-party SaaS applications, covering architecture, data flows, authentication and authorization, and contractual security requirements
• Expand SIEM coverage for the corporate environment by building detections, improving alert quality, and automating ingestion, triage, and reporting via SOAR
• Serve as the security decision-maker on internal product and system deployments, and ensure teams build in line with defined security policies
• Take part in Malware and Internal investigations
• Experience maintaining corporate MDM on macbooks, and mobile devices
• Participate in an on-call rotation and partner with IT, Devops, Escalations, and other members of security to respond to critical incidents and escalations
• Evaluate current and emerging tooling, recommend improvements, and maintain documentation for the policies and procedures you own
• Participate in an on-call rotation and partner with Security and Engineering to respond to critical incidents and escalations

WHO YOU ARE

Qualifications:

• Solid experience in Security Engineering with a strong focus on enterprise security, network security, endpoint security
• Relevant experience working in a corporate security organization/environment with hands on, technical, user facing implementation
• Prior experience working as a technical authority in a team environment, deep hands-on technical expertise, not just admin-level familiarity. You understand how the technology works internally and what goes on behind the scenes
• A self-starter with great communication and organizational skills
• Hands-on experience securing macOS fleets, IAM platforms, proxy solutions, email, and corporate networks, both independently and with an EDR platform (e.g., CrowdStrike)
• Conduct end-to-end security reviews of SaaS applications, Data access and movement, Technical architecture, authentication and authorization controls, and contractual security requirements, to ensure third-party tools meet organizational security standards
• Experience running or substantially contributing to a DLP program, having created custom reporting, search, and automation
• Experience performing third-party/SaaS security reviews and in-depth technical architectural assessments
• Comfortable acting as the technical authority on a team and communicating clearly with non-security stakeholders
• Advance English Proficiency

Bonus:

• Cloud security experience
• Technical Security Certifications that delve deeper than high level concepts
• AI security

Research shows that some candidates hesitate to apply unless they meet every qualification. If you’re excited about this role but your experience doesn’t line up perfectly, we encourage you to apply anyway!

#LI-Hybrid