SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Braze is seeking a Senior Cloud Security Engineer II to join its Security Engineering function as a senior individual contributor and technical leader. This is a step up from the Senior Cloud Security Engineer role, focused on setting technical direction rather than execution alone.
In this pure IC role, you will lead through technical depth and influence rather than direct people management. You'll define cloud security standards, guardrails, and reference architectures that Infrastructure, SRE, and Product Engineering teams build upon, transforming point-in-time fixes into durable, organization-wide patterns.
Key responsibilities span three core areas:
**Secure Architecture & Threat Modeling:** Own threat modeling as a discipline for new cloud technologies and services adopted across Engineering. Partner with Infrastructure, SRE, and Product Engineering to design secure-by-default cloud architectures across AWS, GCP, and self-managed systems. Drive control-plane and IAM security strategy, including relationships with external identity providers and least-privilege models at scale. Continually assess posture, surface systemic and emerging risks, and set priorities to reduce them.
**Detection Engineering, Incident Response & Automation:** Advance detection strategy by designing high-signal detections and SIEM rules. Serve as a senior incident responder and cloud-forensics lead for investigations across AWS and GCP. Own and optimize security tooling such as CrowdStrike, Tenable, and native cloud security services. Lead vulnerability management workflows including scanning, triage, prioritization, and remediation for cloud assets.
**Kubernetes & Platform Security:** Own the security of self-managed Kubernetes environments including control plane, nodes, workload isolation, admission control, and run-time security. Set standards for Infrastructure-as-Code and pipeline security (Terraform preferred). Establish best practices for patch management, base-image hardening, and version management across containerized and VM-based environments. Lead security of large-scale, distributed systems and self-managed data stores like MongoDB.
You will set your own objectives and roadmap for high-impact cloud security work in partnership with Security Engineering leadership. You'll lead cross-functional security initiatives end-to-end, mentor and uplevel other security and platform engineers, and represent cloud security in architecture and design forums.
Braze is a modern, cloud-first SaaS company running entirely on cloud-native infrastructure with large-scale, distributed systems spanning AWS, GCP, and self-managed Kubernetes, backed by self-managed data stores such as MongoDB.
