Senior Security Engineer I

WHAT YOU'LL DO

As a Senior Security Engineer on the Enterprise Security team, you'll protect Braze employees, their assets, and work locations using various tools and technologies. Your responsibilities include investigating malware and advanced threats, implementing DLP in a variety of solutions, securing SAAS applications, hardening internal configurations, proposing security architecture enhancements, and developing alerts & reports.

In this role you will build, maintain, and document essential security infrastructure operating at the center of cloud operations, product, app security, and system architecture. That includes developing and enforcing policies, collaborating with other business units to enhance SIEM capabilities, and reviewing business partner technologies for security improvements.

This role allows for collaboration with technical stakeholders to further expand upon IAM, SSO, MDM, password management, and vulnerability remediation. Take charge of securing communications, facilitating compliance, and deploying automation. You'll operate independently and collaboratively to implement protective systems and mentor junior associates in security concepts.

As a senior team member, you'll help build functionality for a high-scale, growing customer base, collaborate with diverse security professionals, address unique security challenges, participate in on-call rotations, and respond to critical incidents.

On-call rotation and working with Security and Engineering resources to help respond to critical incidents and escalations is an active part of this role.

Responsibilities:

• As a Senior Security Engineer - Enterprise security, your primary focus will be to Design, implement, and manage security solutions to protect Braze’s users and infrastructure
• You will need an in-depth understanding of enterprise networking, architecture, and modern user & cloud tech stack. You will be responsible for taking an active role in developing, facilitating, and implementing security infrastructure designed to scale with the organizations growing needs
• You will need to be adaptable. The braze ecosystem develops fast and at times you will act as a secondary knowledge resource for other areas of security including app sec, compliance, cloud security, and system security
• You will be working to help expand SIEM capabilities by configuring detections and enhancing alerting. You will be working within SAAS applications and automation technologies to develop and document new processes, implement policy control and enforcement, and align with key business stake holders to drive security initiatives
• You will have the freedom to implement automation systems to assist in detections and reporting, and be responsible for prioritizing ingestion and maintaining system operability
• As a senior member of the team, you will work with us to build new functionality that will make it easier, faster, and safer to build for a high scale, growing customer base, and expanding technology footprint
• You will be working with a team of security professionals from varied backgrounds to solve first-in-industry security challenges and fill the use cases of our organization
• You will also be a part of an on-call rotation and work with Security and Engineering resources to help respond to critical incidents and escalations regarding your responsible domain
• This role is a key decision maker regarding internal product and system deployments
• Guide and perform security activities including vulnerability testing and analysis, design and implementation of new solutions/features and investigation into security events
• Ensure teams are implementing applications/environments in compliance of defined security policies based on risk avoidance and security best practices
• Make recommendations on toolset and process modifications and improvements and production IT security support
• Perform the Evaluation and Recommendation of current and future technology solutions to mitigate risk to the business
• Participate in documentation and adherence to Security Policies and Operating Procedures

WHO YOU ARE

• 5+ years of Security Engineering experience with a strong focus on enterprise security, network security, endpoint security
• 3+ years of experience working in a corporate security organization/environment with hands on, technical, user facing implementation
• Prior experience working as a technical authority in a team environment
• A self-starter with great communication and organizational skills
• Professional experience with the modern tech stack and protecting SA AS applications. This includes securing Email, Mac endpoints, IAM, EDR, JAMF, Enterprise networking

Bonus

• Cloud security experience
• Technical Security Certifications that delve deeper than high level concepts