Senior Security Engineer, Enterprise Security

Braze•Austin, TX

1d•$128,900 - $180,000

About The Position

As a Senior Security Engineer on Braze’s Enterprise Security team, you will protect employees, devices, work locations, and infrastructure while owning core security infrastructure used in Enterprise Security operations. You will work closely with Cloud Security, Application Security, and Information Technology, developing and enforcing policies, expanding SIEM capabilities, evaluating vendor and partner technologies, and identifying security gaps. The role spans threat and malware investigations, SaaS and AI security, architecture reviews, mobile device management, communications management, vulnerability remediation, compliance support, and automation. You will work independently and cross-functionally, mentor junior engineers, contribute to DLP implementation as needed, and help secure AI as it develops and is used across business functions. As a senior team member, you will help build security functionality for a growing customer base, participate in an on-call rotation, and respond to critical incidents. For U.S.-based candidates, the expected starting pay range is $128,900–$180,000 per year, with expected on-target earnings of $143,200–$200,000 per year, including bonus or commission. Offers may vary based on location and job-related knowledge, skills, and experience. The role also qualifies for restricted stock unit equity grants and a comprehensive Total Rewards package. Braze describes its working approach as hybrid, though the specific workplace arrangement for this role is not stated.

Requirements

At least 5 years of Security Engineering experience, with a strong focus on enterprise security, network security, and endpoint security.
At least 4 years of experience working in a corporate security organization or environment, with hands-on technical and user-facing implementation experience.
Experience serving as a technical authority in a team environment, with deep hands-on technical expertise rather than admin-level familiarity; understanding of how the technology works internally.
Professional experience with the modern technology stack and protecting SaaS applications.
Direct, hands-on experience securing email, Mac endpoints, IAM (Okta and G Suite), CrowdStrike EDR, SOAR, enterprise network security (endpoint and infrastructure), and forensics.
Experience conducting end-to-end security reviews of SaaS applications, data access and movement, technical architecture, authentication and authorization controls, and contractual security requirements to assess third-party tools against organizational security standards.
Experience leading the design, implementation, and continuous tuning of security programs across laptop endpoints and networks, including policy development, incident triage, data classification alignment, and cross-functional work to prevent unauthorized exfiltration of sensitive data.
Self-starter with strong communication and organizational skills.
Experience with corporate MDM for MacBooks and mobile devices.
Experience with scripting and light coding.
Ability to independently investigate and respond to malware, social engineering, and phishing.

Nice To Haves

Forensics experience.
Cloud security experience.
Technical security certifications that go beyond high-level concepts.
Experience as a foundational security engineer and/or building a new security team from the ground up.

Responsibilities

Design, implement, and operate security solutions that protect Braze employees, devices, and infrastructure, and scale those solutions as the organization grows.
Expand SIEM and automation capabilities by building and tuning detections, improving alerting, automating detection and reporting pipelines, prioritizing data ingestion, and maintaining system health.
Review and govern MCP and AI agent integrations, set controls for AI-assisted coding environments, and define policy for autonomous AI tools across the company.
Secure SaaS applications and internal systems through policy design, control enforcement, and configuration hardening.
Lead enterprise security activities, including vulnerability testing and analysis, security event investigation, and evaluation of tools and technologies to reduce business risk.
Serve as a key decision maker for internal product and system deployments, ensuring teams follow security policy and best practices.
Provide secondary support in adjacent domains, including application security, compliance, cloud security, and system security.
Participate in an on-call rotation and partner with IT, DevOps, Escalations, and Security colleagues to respond to critical incidents and escalations.
Maintain corporate MDM for MacBooks and mobile devices.
Use scripting and light coding to support security work.
Independently investigate and respond to malware, social engineering, and phishing.
Mature the Zero Trust environment and serve as the subject-matter expert on proxy, network, and VPN considerations.
Mentor junior engineers on security fundamentals.
Support compliance efforts, secure communications, and automate work where it reduces toil.
Implement DLP where needed and secure AI as it develops and is used to drive business functions.

Benefits

Competitive compensation that may include equity.
Retirement and Employee Stock Purchase Plans.
Flexible paid time off.
Medical, dental, vision, life, and disability benefit plans.
Fertility benefits and equal paid parental leave.
Professional development supported by formal career pathing, learning platforms, and a yearly learning stipend.
Curated in-office employee experience designed to foster community, team connections, and innovation.
Opportunities to give back through an annual company-wide Volunteer Week and donation matching.
Employee Resource Groups.
Hybrid ways of working.