Senior Security Engineer II

Braze•Toronto, ON

19h•CA$153,000 - CA$240,500•Hybrid

About The Position

Braze is seeking a Senior Cloud Security Engineer II to join their Security Engineering function. This role is a senior individual contributor and technical leader focused on cloud security. The Senior Cloud Security Engineer II will set technical direction, define standards and reference patterns, lead cross-team security initiatives, tackle ambiguous problems, and mentor other engineers. The role will focus deeply on secure architecture and threat modeling, detection engineering and incident response, and Kubernetes and platform security, shaping Braze's overall cloud security strategy. This is a pure IC role where leadership is demonstrated through technical depth and influence.

Requirements

Several years owning cloud security in production, including on-call responsibilities.
Hands-on experience with AWS as the primary cloud.
Working experience with GCP.
Experience with self-managed Kubernetes.
Ability to read and write code (Python, TF).

Nice To Haves

Technical depth and influence rather than authority.
Ability to take an ambiguous, open-ended cloud security problem, define the objective, and deliver a solution that becomes the standard.
Ability to translate complex cloud attack paths, IAM misconfigurations, and multi-step threat scenarios into adopted guidance.
Ability to balance strong controls with operational reality.
Ability to mentor and raise the bar for people around you through mentorship, review, and setting standards.
Staying current with the cloud security landscape, tools, and threats.
Ability to walk someone through the messy middle of problem-solving: what was tried, what broke, and what would be done differently.

Responsibilities

Set the technical direction, defining cloud security standards, guardrails, and reference architectures.
Set objectives and roadmap for high-impact cloud security work and drive to measurable outcomes.
Lead cross-functional security initiatives end to end, including scoping, timelines, stakeholders, and delivery.
Mentor and uplevel other security and platform engineers through pairing, design review, and feedback.
Represent cloud security in architecture and design forums, translating complex attack paths and risk into actionable guidance.
Own threat modeling as a discipline for new cloud technologies, services, and patterns.
Partner with Infrastructure, SRE, and Product Engineering to design secure-by-default cloud architectures and build scalable controls across AWS, GCP, and self-managed systems.
Drive control-plane and IAM security strategy across AWS and GCP.
Continually assess posture, surface systemic and emerging risk, and set priorities for risk reduction.
Advance detection strategy by designing high-signal detections and SIEM rules.
Serve as a senior incident responder and cloud-forensics lead for cloud and run-time security investigations.
Codify learnings from incident response into standard IR playbooks and preventative controls.
Own and optimize security tooling such as CrowdStrike, Tenable, and native cloud security services.
Lead the vulnerability management workflow for cloud assets.
Own the security of self-managed Kubernetes environments, including control plane, nodes, workload isolation, admission control, run-time security, and CI/CD supply chain.
Set standards for Infrastructure-as-Code and pipeline security, designing and hardening IaC and CI/CD automation.
Establish best practices for patch management, base-image hardening, and version management.
Lead the security of large-scale, distributed systems and self-managed data stores.

Benefits

Competitive compensation that may include equity
Retirement and Employee Stock Purchase Plans
Flexible paid time off
Comprehensive benefit plans covering medical, dental, vision, life, and disability
Family services that include fertility benefits and equal paid parental leave
Professional development supported by formal career pathing, learning platforms, and a yearly learning stipend
A curated in-office employee experience, designed to foster community, team connections, and innovation
Opportunities to give back to your community, including an annual company-wide Volunteer Week and donation matching
Employee Resource Groups that provide supportive communities within Braze
Collaborative, transparent, and fun culture recognized as a Great Place to Work®