Senior Security Engineer, Enterprise Security

Braze•Chicago, IL

1d•$128,900 - $180,000

About The Position

As a Senior Security Engineer on Braze’s Enterprise Security team, you will protect employees, devices, work locations, and internal infrastructure. You will investigate malware and advanced threats, secure SaaS applications, harden internal configurations, propose security architecture improvements, and build alerts and reports to help the team manage risk. You will own core security infrastructure and work closely with Cloud Security, Application Security, and Information Technology. The role includes developing and enforcing security policies, expanding SIEM and automation capabilities, evaluating vendor and partner technologies, and addressing security across SaaS, AI, architecture, mobile device management, communications, and vulnerability remediation. You will support compliance efforts, automate work where it reduces operational toil, mentor junior engineers, and help implement data loss prevention where needed. You will review and govern AI integrations and help secure AI used across business functions. You will collaborate with security and cross-functional teams to support a growing customer base, participate in an on-call rotation, and respond to critical incidents and escalations. You will also help mature the Zero Trust environment and serve as a subject-matter expert on proxy, network, and VPN considerations.

Requirements

At least 5 years of Security Engineering experience, with a strong focus on enterprise security, network security, and endpoint security.
At least 4 years of experience in a corporate security organization or environment, including hands-on technical, user-facing implementation.
Experience serving as a technical authority in a team, with deep hands-on expertise beyond administrator-level familiarity and an understanding of how the technology works internally.
Professional experience with modern technology stacks and SaaS application protection.
Direct hands-on experience securing email, Mac endpoints, IAM (Okta and G Suite), CrowdStrike EDR, SOAR, enterprise network security (endpoint and infrastructure), and forensics.
Experience conducting end-to-end security reviews of SaaS applications, data access and movement, technical architecture, authentication and authorization controls, and contractual security requirements.
Experience leading the design, implementation, and ongoing tuning of security programs across laptop endpoints and networks.
Experience leading policy development, incident triage, data classification alignment, and cross-functional collaboration to prevent unauthorized exfiltration of sensitive data.
Strong communication and organizational skills; self-starter.

Nice To Haves

Forensics experience.
Cloud security experience.
Technical security certifications that go beyond high-level concepts.
Experience as a foundational security engineer and/or building a new security team from the ground up.

Responsibilities

Design, implement, and operate security solutions that protect employees, devices, and infrastructure, scaling them as the organization grows.
Expand SIEM and automation capabilities by building and tuning detections, improving alerting, automating detection and reporting pipelines, prioritizing data ingestion, and maintaining system health.
Review and govern MCP and AI agent integrations, set controls for AI-assisted coding environments, and define policies for autonomous AI tooling.
Secure SaaS applications and internal systems through policy design, control enforcement, and configuration hardening.
Lead enterprise security activities, including vulnerability testing and analysis, security event investigation, and evaluation of tools and technologies to reduce business risk.
Act as a key decision maker for internal product and system deployments and ensure teams follow security policy and best practices.
Provide secondary support for adjacent areas including application security, compliance, cloud security, and system security.
Participate in an on-call rotation and partner with IT, DevOps, Escalations, and Security colleagues to respond to critical incidents and escalations.
Maintain corporate MDM for MacBooks and mobile devices.
Use scripting and light coding to support security work.
Independently investigate and respond to malware, social engineering, and phishing.
Mature the Zero Trust environment and serve as a subject-matter expert on proxy, network, and VPN considerations.
Mentor junior engineers on security fundamentals.
Secure communications, support compliance efforts, and automate work where doing so reduces toil.
Implement data loss prevention where needed and help secure AI as it is developed and used for business functions.

Benefits

Competitive compensation that may include equity.
Retirement plan and Employee Stock Purchase Plan.
Flexible paid time off.
Medical, dental, vision, life, and disability benefit plans.
Fertility benefits and equal paid parental leave.
Professional development through formal career pathing, learning platforms, and a yearly learning stipend.
Curated in-office employee experience designed to foster community, team connections, and innovation.
Opportunities to give back through an annual company-wide Volunteer Week and donation matching.
Employee Resource Groups.
Collaborative, transparent, and fun culture recognized as a Great Place to Work.