Senior Software Engineer, Application Security
Core
Build production-grade security services, automation, and developer guardrails to protect Box's platform and customers from vulnerabilities and abuse.
Role type
Senior IC application security engineer
Builds
Security services, backend services, CI/CD security controls, and AI security frameworks
Domain
Enterprise content management + application security
Required skills
Java, Python, Go, Scala, system architecture, API design, automated testing, object-oriented design, functional design, security concepts
Preferred skills
distributed systems, microservices, message queues (Kafka, RabbitMQ, SQS), Java Spring/Spring Boot, public cloud platforms (AWS, GCP, Azure), Infrastructure as Code (Terraform), AI/ML systems, LLMs
Technologies
Java, Python, Go, Scala, Kafka, RabbitMQ, SQS, Spring Boot, AWS, GCP, Azure, Terraform
Responsibilities
Design and operate production-grade security services and internal tools; Engineer end-to-end applications and backend services; Build automation to detect, prevent, and mitigate security threats; Develop 'paved road' frameworks and guardrails for secure development; Implement security controls in CI/CD pipelines; Architect AI security controls and evaluation frameworks
Seniority
Senior, hands-on IC
