19 days ago
Base Salary
$149k - $235k/yr
Responsibilities
- Define cloud security standards, guardrails, and reference architectures for Infrastructure, SRE, and Product Engineering.
- Set objectives and roadmaps for high-impact cloud security work and drive measurable outcomes.
- Lead cross-functional security initiatives from scope through delivery and own the results.
- Mentor and upskill security and platform engineers through pairing, design reviews, and feedback.
- Represent cloud security in architecture and design forums and provide actionable guidance on attack paths and risk.
- Own threat modeling for new cloud technologies, services, and engineering patterns.
- Develop secure-by-default architectures and controls across AWS, GCP, and self-managed systems.
- Lead control-plane and IAM security strategy, including external identity providers, RBAC, and least privilege.
- Design cloud threat detections and SIEM rules and own detection coverage end to end.
- Serve as a senior incident responder and cloud-forensics lead and create incident response playbooks.
- Manage CrowdStrike, Tenable, native cloud security services, and cloud vulnerability management workflows.
- Own security for self-managed Kubernetes control planes, nodes, workloads, admission controls, runtime security, and CI/CD supply chains.
- Set Infrastructure-as-Code and pipeline security standards, with Terraform preferred.
- Establish patch management, base-image hardening, and version-management practices for containerized and VM-based environments.
- Lead security for large-scale distributed systems and self-managed MongoDB data stores.
Requirements
- Several years of production experience owning cloud security, including on-call responsibility.
- Hands-on experience with AWS as the primary cloud, working knowledge of GCP, and self-managed Kubernetes.
- Ability to read and write Python and Terraform code.
- Experience with secure architecture, threat modeling, IAM, detection engineering, incident response, cloud forensics, vulnerability management, Kubernetes security, and Infrastructure-as-Code security.
- Ability to lead ambiguous, organization-wide security initiatives through technical depth, influence, mentorship, and clear standards.
Benefits
- Compensation may include equity grants, retirement and employee stock purchase plans, flexible paid time off, and comprehensive medical, dental, vision, life, and disability benefits.
- Family services include fertility benefits and equal paid parental leave.
- Professional development includes formal career pathing, learning platforms, and a yearly learning stipend.
- Braze supports hybrid ways of working and offers a curated in-office employee experience.
- Employees can participate in Volunteer Week, donation matching, and Employee Resource Groups.
- The role is part of a collaborative culture recognized as a Great Place to Work®.
Tech Stack
Categories
About Braze
Braze builds a customer engagement platform used by marketing teams to orchestrate cross-channel messaging across mobile, email, web, and more. The company sells its software via SaaS subscriptions with analytics, segmentation, and journey orchestration. Founded in 2011 and headquartered in New York, Braze is a public company (NASDAQ: BRZE) with global offices.