Security Engineer

Braze is a customer engagement platform that helps brands deliver customer experiences. The company offers hybrid ways of working and a comprehensive benefits package.

• Protect employees, devices, and infrastructure; design, implement, operate, and scale security solutions.
• Expand SIEM and automation capabilities by building and tuning detections, improving alerts, automating detection and reporting pipelines, prioritizing data ingestion, and maintaining system health.
• Review and govern MCP and AI agent integrations; set controls for AI-assisted coding environments and policies for autonomous AI tooling.
• Secure SaaS applications and internal systems through policy design, control enforcement, and configuration hardening.
• Lead enterprise security activities, including vulnerability testing and analysis, security event investigations, and evaluation of tools and technologies.
• Advise on internal product and system deployments and ensure alignment with security policies and best practices.
• Support adjacent AppSec, compliance, cloud security, and system security domains.
• Participate in an on-call rotation and work with IT, DevOps, Escalations, and security colleagues on critical incidents and escalations.
• Maintain corporate MDM for MacBooks and mobile devices; investigate and respond independently to malware, social engineering, and phishing.
• Mature the Zero Trust environment and advise on proxy, network, and VPN considerations.
• Secure communications, support compliance efforts, automate work where useful, and mentor junior engineers.

• 5+ years of Security Engineering experience focused on enterprise, network, and endpoint security.
• 4+ years working in a corporate security organization with hands-on, technical, user-facing implementation experience.
• Deep hands-on technical expertise and experience serving as a technical authority in a team environment.
• Experience securing email, Mac endpoints, IAM (Okta and GSuite), CrowdStrike EDR, SOAR, enterprise network security (endpoint and infrastructure), and forensics.
• Experience conducting end-to-end SaaS application security reviews, including data access and movement, technical architecture, authentication and authorization controls, and contractual security requirements.
• Experience leading security programs across laptop endpoints and networks, including policy development, incident triage, data classification alignment, and cross-functional work to prevent unauthorized data exfiltration.
• Scripting and light coding experience; strong communication and organizational skills.
• Bonus: forensics, cloud security, technical security certifications, and experience building a security team from the ground up.

• Hybrid work arrangement.
• For candidates based in Ontario, starting pay is CA$133,000–CA$209,000 per year; expected OTE is CA$148,000–CA$232,000 per year, including performance-based or variable compensation. Offers may vary based on location, knowledge, skills, and experience.
• Equity grants in restricted stock (RSUs), retirement and Employee Stock Purchase Plans, flexible paid time off, medical, dental, vision, life and disability benefits, fertility benefits, equal paid parental leave, professional development and a yearly learning stipend, in-office employee experiences, volunteer opportunities and donation matching, and Employee Resource Groups.