Senior Security Engineer, Enterprise Security

Braze • New York, NY

9h • $128,900 - $180,000 • Hybrid

About The Position

As a Senior Security Engineer on Braze’s Enterprise Security team, you will protect employees, devices, work locations, and infrastructure while helping security operations scale with the company. You will own core enterprise security infrastructure and work closely with Cloud Security, Application Security, and Information Technology. The role includes investigating malware and advanced threats, securing SaaS applications and internal systems, hardening configurations, reviewing security architecture, developing alerts and reports, and supporting compliance and vulnerability remediation.

You will expand SIEM and automation capabilities, including detection development, alert tuning, data-ingestion prioritization, and automated reporting. You will also govern MCP and AI-agent integrations, establish controls for AI-assisted coding and autonomous AI tools, and help secure AI as it is adopted across business functions. Other areas of work include MDM, communications management, Zero Trust, proxy, network and VPN security, and potential DLP implementation. The position combines independent technical work with cross-functional collaboration, mentoring junior engineers, participation in an on-call rotation, and response to critical incidents and escalations.

Requirements

• At least 5 years of Security Engineering experience, with a strong focus on enterprise security, network security, and endpoint security.
• At least 4 years of experience in a corporate security organization or environment, including hands-on, technical, user-facing implementation.
• Experience as a technical authority in a team environment, with deep hands-on technical expertise beyond administrator-level familiarity and an understanding of how the technology works internally.
• Professional experience with modern technology stacks and SaaS security, including hands-on security experience with email, Mac endpoints, IAM (Okta and GSuite), CrowdStrike EDR, SOAR, enterprise network security across endpoints and infrastructure, and forensics.
• Experience conducting end-to-end security reviews of SaaS applications, data access and movement, technical architecture, authentication and authorization controls, and contractual security requirements.
• Experience leading the design, implementation, and continuous tuning of security programs for laptop endpoints and networks.
• Experience leading policy development, incident triage, data-classification alignment, and cross-functional collaboration to prevent unauthorized exfiltration of sensitive data.
• Self-starter with strong communication and organizational skills.

Nice To Haves

• Forensics experience.
• Cloud security experience.
• Technical security certifications that go deeper than high-level concepts.
• Experience as a foundational security engineer and/or building a new security team from the ground up.

Responsibilities

• Design, implement, and operate security solutions that protect employees, devices, and infrastructure, and scale those solutions as the organization grows.
• Expand SIEM and automation capabilities by building and tuning detections, improving alerting, automating detection and reporting pipelines, prioritizing data ingestion, and maintaining system health.
• Review and govern MCP and AI-agent integrations, set controls for AI-assisted coding environments, and define policy for autonomous AI tooling.
• Secure SaaS applications and internal systems through policy design, control enforcement, and configuration hardening.
• Lead enterprise-stack security activities, including vulnerability testing and analysis, security-event investigation, and evaluation of tools and technologies to reduce business risk.
• Serve as a key decision maker for internal product and system deployments and ensure teams follow security policy and best practices.
• Provide secondary support for adjacent domains, including application security, compliance, cloud security, and system security.
• Participate in an on-call rotation and partner with IT, DevOps, Escalations, and security colleagues to respond to critical incidents and escalations.
• Maintain corporate MDM for Mac and mobile devices.
• Use scripting and light coding to support security work.
• Independently investigate and respond to malware, social engineering, and phishing.
• Mature the Zero Trust environment and serve as the subject-matter expert on proxy, network, and VPN considerations.
• Secure communications, support compliance efforts, automate work where it reduces toil, and mentor junior engineers on security fundamentals.

Benefits

• Competitive compensation that may include equity.
• Retirement and Employee Stock Purchase Plans.
• Flexible paid time off.
• Comprehensive medical, dental, vision, life, and disability benefit plans.
• Fertility benefits and equal paid parental leave.
• Professional development through formal career pathing, learning platforms, and a yearly learning stipend.
• A curated in-office employee experience designed to foster community, team connections, and innovation.
• Opportunities to give back through an annual company-wide Volunteer Week and donation matching.
• Employee Resource Groups.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed