2 months ago
Base Salary
$149k - $235k/yr
Responsibilities
- Define cloud security standards, guardrails, and reference architectures for Infrastructure, SRE, and Product Engineering.
- Set the roadmap for high-impact cloud security work and lead cross-functional initiatives from scope through delivery.
- Mentor security and platform engineers through pairing, design reviews, and feedback.
- Own threat modeling and secure-by-default architecture practices for cloud technologies and services.
- Drive AWS and GCP control-plane, IAM, identity-provider, RBAC, and least-privilege security strategy.
- Design cloud-threat detections and SIEM rules, and own detection coverage end to end.
- Serve as a senior incident responder and cloud-forensics lead, codifying findings into incident-response playbooks and preventative controls.
- Own and optimize CrowdStrike, Tenable, and native cloud security services while leading cloud vulnerability management.
- Set security standards for self-managed Kubernetes, including control planes, nodes, workload isolation, admission control, runtime security, and supply-chain security.
- Harden Terraform-based infrastructure and CI/CD automation, and establish practices for patch management, base-image hardening, and version management.
- Lead security for large-scale distributed systems and self-managed data stores such as MongoDB.
Requirements
- Several years of production cloud security ownership, including on-call responsibility.
- Hands-on AWS experience as the primary cloud, working GCP experience, and experience with self-managed Kubernetes.
- Ability to read and write Python and Terraform.
- Strong experience with secure cloud architecture, threat modeling, IAM, detection engineering, incident response, cloud forensics, vulnerability management, and platform security.
- Experience setting technical direction, leading ambiguous cross-functional initiatives, mentoring engineers, and influencing architecture decisions as a senior individual contributor.
Benefits
- Compensation may include equity grants, retirement and employee stock purchase plans, flexible paid time off, and comprehensive medical, dental, vision, life, and disability benefits.
- Family services include fertility benefits and equal paid parental leave.
- Professional development includes formal career pathing, learning platforms, and a yearly learning stipend.
- Braze supports hybrid ways of working and offers a curated in-office employee experience.
- Additional offerings include Volunteer Week, donation matching, Employee Resource Groups, and a collaborative culture.
Tech Stack
Categories
About Braze
Braze builds a customer engagement platform used by marketing teams to orchestrate cross-channel messaging across mobile, email, web, and more. The company sells its software via SaaS subscriptions with analytics, segmentation, and journey orchestration. Founded in 2011 and headquartered in New York, Braze is a public company (NASDAQ: BRZE) with global offices.