Senior Security Engineer II

Braze•San Francisco, CA

1d•$149,000 - $235,000•Hybrid

About The Position

Braze is seeking a Senior Cloud Security Engineer II to join their Security Engineering team as a senior individual contributor and technical leader for cloud security. This role is a step up from the Senior Cloud Security Engineer position, focusing on setting technical direction, defining standards, leading cross-team initiatives, and tackling ambiguous problems. The role will specialize in secure architecture and threat modeling, detection engineering and incident response, and Kubernetes and platform security, shaping Braze's approach to cloud security across the Engineering department. This is a pure individual contributor role where leadership is demonstrated through technical depth and influence, not people management.

Requirements

Several years owning cloud security in production, including on-call responsibilities.
Hands-on experience with AWS as the primary cloud.
Working experience with GCP.
Experience with self-managed Kubernetes.
Ability to read and write code in Python.
Ability to read and write code in Terraform.

Nice To Haves

Technical depth and influence rather than authority.
Ability to take an ambiguous, open-ended cloud security problem, define the objective, and deliver a solution that becomes the standard.
Ability to translate complex cloud attack paths, IAM misconfigurations, and multi-step threat scenarios into guidance engineers adopt.
Ability to balance strong controls with operational reality.
Ability to mentor and raise the bar for people around you through mentorship, review, and setting standards.
Staying current with the cloud security landscape, tools, and threats.
Ability to walk someone through the messy middle of problem-solving, including what was tried, what broke, and what would be done differently.

Responsibilities

Set the technical direction, including defining cloud security standards, guardrails, and reference architectures.
Set personal objectives and roadmap for high-impact cloud security work, driving them to measurable outcomes.
Lead cross-functional security initiatives from scope to delivery, guiding technical debates and owning the results.
Mentor and uplevel other security and platform engineers through pairing, design review, and feedback.
Represent cloud security in architecture and design forums, translating complex risks into actionable guidance.
Own threat modeling as a discipline for new cloud technologies, services, and patterns.
Partner with Infrastructure, SRE, and Product Engineering to design secure-by-default cloud architectures and scalable controls across AWS, GCP, and self-managed systems.
Drive control-plane and IAM security strategy across AWS and GCP.
Continually assess posture, surface systemic and emerging risk, and set priorities for risk reduction.
Advance detection strategy by designing high-signal detections and SIEM rules.
Serve as a senior incident responder and cloud-forensics lead for cloud and run-time security investigations.
Codify learnings from incident response into standard IR playbooks and preventative controls.
Own and optimize security tooling such as CrowdStrike, Tenable, and native cloud security services.
Lead the vulnerability management workflow for cloud assets.
Own the security of self-managed Kubernetes environments, including control plane, nodes, workload isolation, admission control, run-time security, and CI/CD supply chain.
Set standards for Infrastructure-as-Code and pipeline security, preferring Terraform.
Design and harden IaC and CI/CD automation.
Establish best practices for patch management, base-image hardening, and version management.
Lead the security of large-scale, distributed systems and self-managed data stores (e.g., MongoDB).

Benefits

Competitive compensation that may include equity
Retirement and Employee Stock Purchase Plans
Flexible paid time off
Comprehensive benefit plans covering medical, dental, vision, life, and disability
Family services that include fertility benefits and equal paid parental leave
Professional development supported by formal career pathing, learning platforms, and a yearly learning stipend
A curated in-office employee experience, designed to foster community, team connections, and innovation
Opportunities to give back to your community, including an annual company-wide Volunteer Week and donation matching
Employee Resource Groups that provide supportive communities within Braze
Collaborative, transparent, and fun culture recognized as a Great Place to Work®