Senior Security Engineer, Enterprise Security

At Braze, we have found our people. We’re a genuinely approachable, exceptionally kind, and intensely passionate crew. We seek to ignite that passion by setting high standards, championing teamwork, and creating work-life harmony as we collectively navigate rapid growth on a global scale while striving for greater equity and opportunity – inside and outside our organization. To flourish here, you must be prepared to set a high bar for yourself and those around you. There is always a way to contribute: Acting with autonomy, having accountability and being open to new perspectives are essential to our continued success. Our deep curiosity to learn and our eagerness to share diverse passions with others gives us balance and injects a one-of-a-kind vibrancy into our culture. If you are driven to solve exhilarating challenges and have a bias toward action in the face of change, you will be empowered to make a real impact here, with a sharp and passionate team at your back. If Braze sounds like a place where you can thrive, we can’t wait to meet you. WHAT YOU'LL DO As a Senior Security Engineer on the Enterprise Security team, you'll protect Braze employees, their devices, and our work locations. This is a specialist level opportunity where you’ll investigate malware and advanced threats, secure our SaaS applications, harden internal configurations, propose security architecture improvements, and build the alerts and reports that keep the team ahead of risk. You'll own core security infrastructure that sits at the center of Enterprise Security operations and works closely with Cloud Security, App Security, and Information Technology. That means developing and enforcing policies, expanding our SIEM capabilities with partners across the business, and evaluating vendor and partner technologies for security gaps. This role allows for collaboration with technical stakeholders to further expand upon DLP, Integration & 3rd party Saas application review, Shadow AI, MDM, and vulnerability remediation. Take charge of securing communications, facilitating compliance, and deploying automation. You'll operate both independently and collaboratively to implement protective systems. As a senior team member, you'll help build functionality for a high-scale, growing customer base, collaborate with diverse security professionals, address unique security challenges, participate in on-call rotations, and respond to critical incidents. Main responsibilities: • Design, implement, and operate enterprise security controls across endpoints (macOS-heavy), identity and access management, network, and email • Lead the Data Loss Prevention program end to end: policy design, classification alignment, tuning, and incident triage across endpoint, network, and cloud • Conduct security reviews of third-party SaaS applications, covering architecture, data flows, authentication and authorization, and contractual security requirements • Expand SIEM coverage for the corporate environment by building detections, improving alert quality, and automating ingestion, triage, and reporting via SOAR • Serve as the security decision-maker on internal product and system deployments, and ensure teams build in line with defined security policies • Take part in Malware and Internal investigations • Experience maintaining corporate MDM on macbooks, and mobile devices • Participate in an on-call rotation and partner with IT, Devops, Escalations, and other members of security to respond to critical incidents and escalations • Evaluate current and emerging tooling, recommend improvements, and maintain documentation for the policies and procedures you own • Participate in an on-call rotation and partner with Security and Engineering to respond to critical incidents and escalations • WHO YOU ARE Qualifications: • Solid experience in Security Engineering with a strong focus on enterprise security, network security, endpoint security • Relevant experience working in a corporate security organization/environment with hands on, technical, user facing implementation • Prior experience working as a technical authority in a team environment, deep hands-on technical expertise, not just admin-level familiarity. You understand how the technology works internally and what goes on behind the scenes • A self-starter with great communication and organizational skills • Hands-on experience securing macOS fleets, IAM platforms, proxy solutions, email, and corporate networks, both independently and with an EDR platform (e.g., CrowdStrike) • Conduct end-to-end security reviews of SaaS applications, Data access and movement, Technical architecture, authentication and authorization controls, and contractual security requirements, to ensure third-party tools meet organizational security standards • Experience running or substantially contributing to a DLP program, having created custom reporting, search, and automation • Experience performing third-party/SaaS security reviews and in-depth technical architectural assessments • Comfortable acting as the technical authority on a team and communicating clearly with non-security stakeholders • Advance English Proficiency Bonus: • Cloud security experience • Technical Security Certifications that delve deeper than high level concepts • AI security Research shows that some candidates hesitate to apply unless they meet every qualification. If you’re excited about this role but your experience doesn’t line up perfectly, we encourage you to apply anyway! #LI-Hybrid WHAT WE OFFER Braze benefits vary by location, and we encourage you to review our specific benefits offerings for each country at here. More details on benefits plans will be provided if you receive an offer of employment. From offering comprehensive benefits to fostering hybrid ways of working, we've got you covered so you can prioritize work-life harmony. Braze offers benefits such as: • Competitive compensation that may incl