> Markdown version of [/jobs/ext/2169558-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/2169558-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Security Engineer - **Company:** Braze - **Location:** Saint Paul, MN, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Software as a Service, Cloud Computing, Cloud Computing Security, Cyber Security, Identity and Access Management, Python (Programming Language), Reliability Engineering, Security Information and Event Management, Software Vulnerability Management, Cloud Platform System, Vulnerability Analysis - **Published:** August 21, 2026 - **Apply:** https://job-boards.greenhouse.io/braze/jobs/8075825 ## About the Role * ~3+ years in security operations, cloud, or infrastructure, with hands-on time operating security tooling (EDR, SIEM, and/or vulnerability scanners) * Working knowledge of AWS, especially IAM; some GCP and container/cloud-workload exposure is a plus * You can script in Python to automate small tasks - not just drive tools through their UI * You can explain not just what a tool flagged, but why it matters ## Description Braze is a modern, cloud-first SaaS company running on cloud-native infrastructure across AWS and GCP. We're looking for a Cloud Security Engineer to join our Security Engineering function - a hands-on role focused on keeping our security operations running well day to day. You'll respond to incidents, review changes and access for security risk, operate the security tooling that protects our environment (endpoint/EDR, SIEM, cloud posture, and vulnerability scanners), manage identity and access, and drive vulnerabilities to remediation., This is an individual-contributor role that works within priorities set by senior members of the team. You don't need to have set security strategy or led a team - but you should operate tools with real judgment (knowing a genuine finding from noise, and why it matters), be reliable at driving issues to closure, and want to grow deeper in cloud security. It sits one level below our Senior Cloud Security Engineer., 1) Incident response & investigations: * Respond to security alerts and events - triage, contain, and help investigate - with support from senior engineers on higher-severity incidents * Follow and help improve our incident-response playbooks, and capture what you learn so the next response goes faster * Pull the right data (cloud logs, endpoint telemetry) to reconstruct what happened and support the response 2) Security reviews & IAM: * Review changes, designs, and cloud configurations for security issues, and give practical, specific feedback to the teams making them * Operate and improve identity and access across AWS and GCP: handle access requests, run least-privilege reviews, and keep access hygiene high * Reason about IAM policies and permissions - spotting risky or over-broad access and proposing tighter alternatives 3) Operate the security stack: * Run and tune our security tooling day to day - CrowdStrike (EDR/CSPM), SIEM, cloud-native security services, and vulnerability scanners such as Tenable * Triage the alerts these tools produce: separate real signal from noise, tune out false positives, and escalate what matters * Keep tooling healthy - coverage, agent deployment, integrations, and configuration * Write small scripts (Python) to automate repetitive work and reduce manual toil 4) Vulnerability management & remediation: * Run vulnerability scanning across cloud assets, and triage and prioritize findings by real risk, not just severity score * Drive remediation to closure: partner with Infrastructure, SRE, and Product Engineering to get fixes shipped, and track them until they're done * Spot recurring issues and suggest the guardrail or config change that stops them coming back WHO YOU ARE You're a hands-on engineer who's curious about how attacks and cloud systems work - not someone who just clicks through consoles. You operate security tools with judgment: you can tell a real detection from a false positive, explain why a permission or misconfiguration is risky, and decide what deserves attention now. You're reliable at chasing an issue all the way to closure, and you communicate clearly and without friction with the teams you're asking to fix things. You want to grow into deeper cloud security work, and you learn quickly. Above all, you can walk someone through the messy middle - what you tried, what broke, and what you'd do differently. 1) WHAT WE'RE SCREENING FOR: You should be able to reason about the areas below from real experience - not just recite tools you've touched. We go deep on the "why" and the "what would you do if," and we'd rather hear about something that went sideways than a tidy success: * Incident response - how you triage an alert: what you check first, in what order, and when you pull in someone senior * Endpoint / EDR - a real detection versus a false positive, and how you told them apart or tuned it out * IAM - how you reason about least privilege, and how you'd handle an over-broad access request * Vulnerability remediation - how you prioritize findings, and how you actually get another team to fix them * Security reviews - what you look for when reviewing a change, config, or access request * Automation - something small you scripted to cut out manual work ## Related Videos - [30 powerful AWS hacks in just 30 minutes: Boost your developer productivity](https://www.wearedevelopers.com/videos/1624-30-powerful-aws-hacks-in-just-30-minutes-boost-your-developer-productivity) - [Containers in the cloud - State of the Art in 2022](https://www.wearedevelopers.com/videos/410-containers-in-the-cloud-state-of-the-art-in-2022) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Reliable scalability: How Amazon.com scales on AWS](https://www.wearedevelopers.com/videos/983-reliable-scalability-how-amazon-com-scales-on-aws) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)