Senior Security Engineer, Enterprise Security

WHAT YOU'LL DO

As a Senior Security Engineer on the Enterprise Security team, you'll protect Braze employees, their assets, and work locations using various tools and technologies. Your responsibilities include investigating malware and advanced threats, implementing DLP in a variety of solutions, securing SAAS applications, hardening internal configurations, proposing security architecture enhancements, and developing alerts & reports.

In this role you will build, maintain, and document essential security infrastructure operating at the center of cloud operations, product, app security, and system architecture. That includes developing and enforcing policies, collaborating with other business units to enhance SIEM capabilities, and reviewing business partner technologies for security improvements.

This role allows for collaboration with technical stakeholders to further expand upon forensics, Threat investigations, Malware investigations, IAM, SSO, MDM, password management, and vulnerability remediation. Take charge of securing communications, facilitating compliance, and deploying automation. You'll operate independently and collaboratively to implement protective systems and mentor junior associates in security concepts.

As a senior team member, you'll help build functionality for a high-scale, growing customer base, collaborate with diverse security professionals, address unique security challenges, participate in on-call rotations, and respond to critical incidents.

On-call rotation and working with Security and Engineering resources to help respond to critical incidents and escalations is an active part of this role.

Responsibilities:

As a Senior Security Engineer - Enterprise security, your primary focus will be to Design, implement, and manage security solutions to protect Braze’s users and infrastructure

You will need an in-depth understanding of enterprise networking, architecture, and modern user & cloud tech stack. You will be responsible for taking an active role in developing, facilitating, and implementing security infrastructure designed to scale with the organizations growing needs

You will need an in-depth understanding of enterprise networking, architecture, and modern user & cloud tech stack. You will be responsible for taking an active role in developing, facilitating, and implementing security infrastructure designed to scale with the organizations growing needs

You will need to be adaptable. The braze ecosystem develops fast and at times you will act as a secondary knowledge resource for other areas of security including app sec, compliance, cloud security, and system security

You will be working to help expand SIEM capabilities by configuring detections and enhancing alerting. You will be working within SaaS applications and automation technologies to develop and document new processes, implement policy control and enforcement, and align with key business stake holders to drive security initiatives

You will have the freedom to implement automation systems to assist in detections and reporting, and be responsible for prioritizing ingestion and maintaining system operability

As a senior member of the team, you will work with us to build new functionality that will make it easier, faster, and safer to build for a high scale, growing customer base, and expanding technology footprint

You will be working with a team of security professionals from varied backgrounds to solve first-in-industry security challenges and fill the use cases of our organization

You will also be a part of an on-call rotation and work with Security and Engineering resources to help respond to critical incidents and escalations regarding your responsible domain

This role is a key decision maker regarding internal product and system deployments

Guide and perform security activities including vulnerability testing and analysis, design and implementation of new solutions/features and investigation into security events

Ensure teams are implementing applications/environments in compliance of defined security policies based on risk avoidance and security best practices

Make recommendations on toolset and process modifications and improvements and production IT security support

Perform the Evaluation and Recommendation of current and future technology solutions to mitigate risk to the business

Participate in documentation and adherence to Security Policies and Operating Procedures

WHO YOU ARE

Qualifications:

5+ years of Security Engineering experience with a strong focus on enterprise security, network security, endpoint security

3+ years of experience working in a corporate security organization/environment with hands on, technical, user facing implementation

Prior experience working as a technical authority in a team environment

A self-starter with great communication and organizational skills

Professional experience with the modern tech stack and protecting SaaS applications. Direct technical and hands on experience with securing Email, Mac endpoints, IAM, Crowdstrike EDR, Enterprise networking security ( both endpoint and infra ), and forensics

Conduct end-to-end security reviews of SaaS applications, data flow analysis, Technical architecture, authentication and authorization controls, and contractual security requirements, to ensure third-party tools meet organizational security standards

Lead the design, implementation, and continuous tuning of forensics, programs across endpoints, networks, and cloud environments, including policy development, incident triage, data classification alignment, and cross-functional collaboration to prevent unauthorized exfiltration of sensitive data

Bonus:

Cloud security experience

AI security

Technical Security Certifications that delve deeper than high level concepts

For candidates based in Ontario, the pay range at the start of employment for this position is expected to be between CA$133,000 - CA$209,000/year, with an expected On Target Earnings (OTE) between CA$148,000 - CA$232,000/year (including performance-based or variable compensation (bonus or commission). Your particular offer may vary depending on multiple individual factors, including market location, job-related knowledge, skills, and experience. In addition to cash compensation, this role qualifies for a comprehensive Total Rewards package that includes equity grants of restricted stock (RSUs) so that you will own a piece of our company.