Staff Security Engineer
Core
Building and scaling security automation, supply chain integrity, and SDLC guardrails for Box's enterprise content management platform using AI.
Role type
Staff Security Engineer (Platform & Product Security)
Builds
Security automation tools, supply chain security controls, and developer-first SDLC guardrails for Box's platform.
Domain
Enterprise Content Management, Cloud Security, AI-driven Security
Deliverable
production ML models | product features | infrastructure
Required skills
DevSecOps automation, software supply chain security (SBOM, signing, provenance), SDLC controls/agents, fuzzing, application security tooling, Python/Go/Java/TypeScript, production system architecture, cross-functional collaboration, data-driven decision making
Preferred skills
SaaS at scale, developer platform/tooling, cloud-native environments, open source contributions, CI/CD, container registries, policy engines, SAST/DAST
Responsibilities
Contribute to a roadmap that scales Box's security capabilities across platform and product surfaces; Ship MVPs and iterate on security automation; Partner with Assurance & Architecture Team and cross-functional teams to embed security into workflows; Drive a breaker–builder approach to identify attack paths and operationalize secure product development; Establish clear team operating mechanisms including prioritization and metrics; Define and track KPIs and KRIs for risk reduction and developer experience improvements
Seniority
Staff, high-impact IC with strategic influence
