
Software Development · 2.3k people
Senior Security Engineer II
Posted 26 Oct
What’s this role about? Set the technical direction for cloud security by defining standards, guardrails, and reference architectures across AWS, GCP, and Kubernetes. Lead cross-functional security initiatives, perform threat modeling, and manage detection engineering and incident response workflows.
Skills required
Tap the ones you have
Want to get this job faster?
Apply with AI
No more application formsOur AI fills them in and submits them for you. You just pick the jobs.
Find hiring manager
Reach the person hiringEmail the person behind the job, not the inbox.
Company
About Braze Braze is the leading customer engagement platform that empowers brands to Be Absolutely Engaging.™ Braze allows any marketer to collect and take action on any amount of data from any source, so they can creatively engage with customers in real time, across channels from one platform. From cross-channel messaging and journey orchestration to Al-powered experimentation and optimization, Braze enables companies to build and maintain absolutely engaging relationships with their customers that foster growth and loyalty. The company has been recognized as a 2024 U.S. News & World Report Best Companies to Work For, 2024 Best Small & Medium Workplaces in Europe by Great Place to Work®, 2024 Fortune Best Workplaces for Women™ by Great Place to Work® and was named a Leader by Gartner® in the 2024 Magic Quadrant™ for Multichannel Marketing Hubs and a Strong Performer in The Forrester Wave™: Email Marketing Service Providers, Q3 2024. Braze is headquartered in New York with 15 offices across AMER, LATAM, EMEA, and APAC. Learn more at braze.com.
Braze
Braze is the leading customer engagement platform that empowers brands to Be Absolutely Engaging.™

Responsibilities
- Define the cloud security standards, guardrails, and reference architectures
- that Infrastructure, SRE, and Product Engineering build on — turning
- point-in-time fixes into durable, org-wide patterns
- Set your own objectives and roadmap for high-impact cloud security work, in
- partnership with Security Engineering leadership, and drive it to measurable
- outcomes
- Lead cross-functional security initiatives end to end — scope, timeline,
- stakeholders, and delivery — guiding technical debates to a decision and
- owning the result
- Mentor and uplevel other security and platform engineers through pairing,
- design review, and feedback; act as a force multiplier and the go-to
- technical resource for cloud security
- Represent cloud security in architecture and design forums, translating
- complex attack paths and risk into clear, actionable guidance engineers will
- actually adopt
- Own threat modeling as a discipline for new cloud technologies, services, and
- patterns adopted across Engineering — making it a repeatable, scalable
- practice rather than a one-off exercise
- Partner with Infrastructure, SRE, and Product Engineering to design
- secure-by-default cloud architectures and build practical, scalable controls
- across AWS, GCP, and self-managed systems
- Drive control-plane and IAM security strategy across AWS and GCP, including
- relationships with external identity providers, RBAC models, and least
- privilege at scale
- Continually assess posture, surface systemic and emerging risk, and set the
- priorities that reduce it
- Advance our detection strategy: design high-signal detections and SIEM rules
- (with our SIEM Management function) and own detection coverage for cloud
- threats end to end
- Serve as a senior incident responder and cloud-forensics lead for cloud and
- run-time security investigations across AWS and GCP — and codify what you
- learn into standard IR playbooks and preventative controls
- Own and optimize security tooling such as CrowdStrike (EDR/CSPM/IR), Tenable,
- and native cloud security services, and lead our vulnerability management
- workflow — scanning, triage, prioritization, and remediation — for cloud
- assets
- Own the security of our self-managed Kubernetes environments — control plane,
- nodes, workload isolation, admission control, run-time security, and the
- CI/CD supply chain feeding them
- Set the standards for Infrastructure-as-Code and pipeline security (Terraform
- preferred): design and harden IaC and CI/CD automation so security is built
- into how we ship
- Establish best practices for patch management, base-image hardening, and
- version management across containerized and VM-based environments
- Lead the security of large-scale, distributed systems and self-managed data
- stores (e.g., MongoDB), accounting for their real-world operational and
- security implications
Qualification
- You are a senior individual contributor who leads through technical depth and
- influence rather than authority. You can take an ambiguous, open-ended cloud
- security problem, define the objective yourself, and deliver a solution that
- becomes the way Braze does it going forward. You translate complex cloud attack
- paths, IAM misconfigurations, and multi-step threat scenarios into guidance
- engineers adopt, and you balance strong controls with operational reality. You
- raise the people around you — through mentorship, review, and the standards you
- set — and you stay current with the cloud security landscape, tools, and
- threats. Above all, you can walk someone through the messy middle — what you
- tried, what broke, and what you'd do differently.
- Several years owning cloud security in production — on-call for it, not
- adjacent to it
- Hands-on, not theoretical: AWS as primary cloud, working GCP, self-managed
- You read and write code (Python, TF)
- For candidates based in the United States, the pay range for this position at
- the start of employment is expected to be between $149,000 and $235,000/year
- with an expected On Target Earnings (OTE) between $166,000 and $261,000/year
- (including bonus or commission). Your exact offer may vary depending on multiple
- individualized factors, including market location, job-related knowledge,
- skills, and experience. In addition to cash compensation, this role qualifies
- for a comprehensive Total Rewards package that includes equity grants of
- restricted stock (RSUs) so that you will own a piece of our company.
Benefits
- Braze benefits vary by location, and we encourage you to review our specific
- From offering comprehensive benefits to fostering hybrid ways of working, we've
- got you covered so you can prioritize work-life harmony. Braze offers benefits
- Flexible paid time off
- Comprehensive benefit plans covering medical, dental, vision, life, and
- disability
- Family services that include fertility benefits and equal paid parental leave
- Professional development supported by formal career pathing, learning
- platforms, and a yearly learning stipend
- A curated in-office employee experience, designed to foster community, team
- connections, and innovation
- Opportunities to give back to your community, including an annual
- company-wide Volunteer Week and donation matching
- Employee Resource Groups that provide supportive communities within Braze
- Collaborative, transparent, and fun culture recognized as a Great Place to
- Braze is the leading customer engagement platform that empowers brands to Be
- Absolutely Engaging™ Braze helps brands deliver great customer experiences that
- drive value both for consumers and for their businesses. Built on a foundation
- of composable intelligence, BrazeAI™ allows marketers to combine and activate AI
- agents, models, and features at every touchpoint throughout the Braze Customer
- Engagement Platform for smarter, faster, and more meaningful customer
- engagement. From cross-channel messaging and journey orchestration to Al-powered
- decisioning and optimization, Braze enables companies to turn action into
- interaction through autonomous, 1:1 personalized experiences.
- The company has repeatedly been recognized as a Leader in marketing technology
- by industry analysts, and was voted a G2 “Best of Marketing and Digital
- Advertising Software Product” in 2025.
- Braze was also named a 2025 Best Companies To Work For by U.S. News and World
- Report, a 2025 America’s Greatest Companies by Newsweek, and a 2025 Fortune Best
- Workplace in Technology™ by Great Place To Work®, among other accolades. Braze
- is also proudly certified as a Great Place to Work® in the U.S., the UK,
- Australia, and Singapore.
- The company is headquartered in New York with offices in Austin, Berlin,
- Bucharest, Chicago, Dubai, Jakarta, London, Paris, San Francisco, São Paulo,
- Singapore, Seoul, Sydney and Tokyo.
- At Braze, we strive to create equitable growth and opportunities inside and
- outside the organization.
- Building meaningful connections is at the heart of everything we do, and that
- includes our recruiting practices. We're committed to offering all candidates a
- fair, accessible, and inclusive experience – regardless of age, color,
- We know that sometimes different circumstances can lead talented people to
- hesitate to apply for a role unless they meet 100% of the criteria. If this
- sounds familiar, we encourage you to apply, as we’d love to meet you
- At Braze, we’re committed to a fair and transparent candidate experience. To
- help our recruitment teams focus on what matters most — the person behind each
- This includes using AI to analyze the experience, skills and qualifications in
- your application materials to help with screening and prioritizing candidates.
- Such screening may amount to a form of solely automated decision-making. We also
- use AI for administrative support, like scheduling and recording interviews and
- summarizing interview notes. Our recruiting teams remain responsible for all
- hiring decisions and are involved throughout the process.
- Depending on where you are located, you may have certain rights available to you
- To opt out of AI-assisted review of your application, please click the “Learn
- More” at the end of the application form below and follow the instructions
- before submitting your application. Please note, if you apply to multiple
- roles at Braze, you will need to opt out in relation to each application.
- To exercise other types of rights, such as rights to request further
- information about how AI is used in our recruitment process, to request a
- retroactive manual review of any decision made or to contest a decision,
- please contact us at talentdata.privacy@braze.com
- [talentdata.privacy@braze.com].
- Please contact us at talentdata.privacy@braze.com [talentdata.privacy@braze.com]
- with any questions. To find out more about our hiring process, check out this
- page [https://www.braze.com/company/careers/how-we-hire].
- Notice Regarding Automated Employment Decision Tool (NYC Local Law 144)
- Our use of AI during the application review process may include the use of
- automated employment decision tools. Pursuant to New York City Local Law 144,
- for roles based in New York City, or if you reside in New York City, you have
- the right to request an alternative selection process or a reasonable
- accommodation instead of AI-assisted review.
- To opt out of AI-assisted review of your application, please click the “Learn
- More” button below and follow the instructions before submitting your
- application. Please note, if you apply to multiple roles at Braze, you will need
- to opt out in relation to each application. Please submit any other request to
- our Talent Acquisition team at talentdata.privacy@braze.com
- [talentdata.privacy@braze.com] promptly after applying. Summaries of the most
- recent bias audit results for such tools are available here
- Policy [https://www.braze.com/company/legal/privacy-policy-job-candidates] for
- more information on how Braze processes your personal information during the
- recruitment process and, if applicable based on your location, how you can
- exercise any privacy rights.
Interested in this role?
Recommended jobs
- M

Sr External Web Application & API Security Engineer
McDonald's Corporation·Chicago
$138.2K – $172.8KOn-siteFull-time5-10 years expSkills required
API securityWeb application securityWAF - B

Senior Security Engineer, Enterprise Security
Braze·Chicago
$128.9K – $180KHybridFull-time5-10 years expSkills required
Enterprise SecurityNetwork SecurityEndpoint Security - I

Principal Product Security Engineer
iManage·Chicago
$165K – $205KHybridFull-time10+ years expSkills required
Product SecurityZero-Trust ArchitectureThreat Modeling