Responsibilities
- Respond to, triage, contain, and help investigate security alerts and incidents using cloud logs and endpoint telemetry.
- Follow and improve incident-response playbooks and document lessons learned.
- Review cloud changes, designs, configurations, and access requests for security risks.
- Operate and improve identity and access management across AWS and GCP, including least-privilege reviews and access hygiene.
- Operate, tune, and maintain CrowdStrike, EDR/CSPM, SIEM, cloud-native security services, and vulnerability scanners such as Tenable.
- Triage security-tool alerts, reduce false positives, maintain tool coverage and integrations, and escalate meaningful findings.
- Run vulnerability scans across cloud assets, prioritize findings by risk, and drive remediation to closure with partner engineering teams.
- Write small Python scripts to automate repetitive security operations work.
- Identify recurring security issues and recommend guardrails or configuration changes to prevent recurrence.
Requirements
- Approximately three or more years of experience in security operations, cloud, or infrastructure, including hands-on operation of EDR, SIEM, and/or vulnerability scanners.
- Working knowledge of AWS, especially IAM; exposure to GCP and containers or cloud workloads is a plus.
- Ability to script in Python for small-task automation.
- Ability to distinguish meaningful security findings from false positives and explain their impact.
- Practical experience with incident response, endpoint/EDR investigations, IAM and least privilege, vulnerability remediation, security reviews, and automation.
- Strong SRE, infrastructure, DevOps, SOC, or security-analyst backgrounds transitioning into cloud security are welcomed.
- Home labs, CTFs, write-ups, side projects, cloud-attack-path knowledge, incident experience, and AWS or security certifications are valued.
Benefits
- Hybrid work arrangement with a curated in-office experience.
- Retirement and Employee Stock Purchase Plans.
- Flexible paid time off.
- Medical, dental, vision, life, and disability benefit plans.
- Family services including fertility benefits and equal paid parental leave.
- Professional development through career pathing, learning platforms, and a yearly learning stipend.
- Volunteer Week, donation matching, and Employee Resource Groups.
- Collaborative culture recognized as a Great Place to Work®.
Tech Stack
Categories
About Braze
Braze is the leading customer engagement platform that empowers brands to Be Absolutely Engaging.™ Braze allows any marketer to collect and take action on any amount of data from any source, so they can creatively engage with customers in real time, across channels from one platform. From cross-channel messaging and journey orchestration to Al-powered experimentation and optimization, Braze enables companies to build and maintain absolutely engaging relationships with their customers that foster growth and loyalty. The company has been recognized as a 2024 U.S. News & World Report Best Companies to Work For, 2024 Best Small & Medium Workplaces in Europe by Great Place to Work®, 2024 Fortune Best Workplaces for Women™ by Great Place to Work® and was named a Leader by Gartner® in the 2024 Magic Quadrant™ for Multichannel Marketing Hubs and a Strong Performer in The Forrester Wave™: Email Marketing Service Providers, Q3 2024. Braze is headquartered in New York with 15 offices across AMER, LATAM, EMEA, and APAC. Learn more at braze.com.