Braze is seeking a Senior Cloud Security Engineer II in New York (hybrid) to join our Security Engineering team. This senior IC role defines the technical direction for cloud security, setting standards, guardrails, and reference architectures that Infrastructure, SRE, and Product Engineering rely on, and leads end-to-end security initiatives while mentoring other engineers. You will specialize in secure architecture and threat modeling, detection engineering and incident response, and Kubernetes/platform security, with deep responsibility across AWS, GCP, and self-managed systems. Key areas: Secure architecture & threat modeling: design secure-by-default cloud architectures; drive IAM and access control across AWS and GCP; work with external identity providers; reduce risk via repeatable practices. Detection engineering, IR, and automation: develop high-signal detections for cloud threats; lead cloud-forensics; own security tooling (CrowdStrike, Tenable) and vulnerability management. Kubernetes & platform security: secure self-managed Kubernetes; implement IaC and CI/CD security; handle patch and image hardening; protect data stores like MongoDB. Leadership: set objectives, drive roadmaps, mentor engineers, and represent cloud security in architecture/design forums. Requirements: Several years of production cloud security experience; hands-on with AWS as primary cloud, plus GCP; experience with Python and Terraform. Based in the United States with a willingness to work in a hybrid model. Compensation includes a salary range of $149,000 to $235,000/year with an OTE of $166,

Braze is seeking a Senior Cloud Security Engineer II in New York (hybrid) to join our Security Engineering team. This senior IC role defines the technical direction for cloud security, setting standards, guardrails, and reference architectures that Infrastructure, SRE, and Product Engineering rely on, and leads end-to-end security initiatives while mentoring other engineers. You will specialize in secure architecture and threat modeling, detection engineering and incident response, and Kubernetes/platform security, with deep responsibility across AWS, GCP, and self-managed systems. Key areas: Secure architecture & threat modeling: design secure-by-default cloud architectures; drive IAM and access control across AWS and GCP; work with external identity providers; reduce risk via repeatable practices. Detection engineering, IR, and automation: develop high-signal detections for cloud threats; lead cloud-forensics; own security tooling (CrowdStrike, Tenable) and vulnerability management. Kubernetes & platform security: secure self-managed Kubernetes; implement IaC and CI/CD security; handle patch and image hardening; protect data stores like MongoDB. Leadership: set objectives, drive roadmaps, mentor engineers, and represent cloud security in architecture/design forums. Requirements: Several years of production cloud security experience; hands-on with AWS as primary cloud, plus GCP; experience with Python and Terraform. Based in the United States with a willingness to work in a hybrid model. Compensation includes a salary range of $149,000 to $235,000/year with an OTE of $166,