Senior Software Engineer, Application Security

Box is seeking a Senior Software Engineer, Application Security to help build production-grade security services and automation that protect Box and its customers. In this hybrid role based in Redwood City, CA, you will design and deploy security controls that fit directly into Box product development and CI/CD workflows, spanning the SDLC from engineering guardrails to AI security protections.

You will work across end-to-end application and backend service development while partnering with Product and Engineering teams to turn complex security challenges into scalable software solutions.

What you’ll do

• Design, build, and operate production-grade security services, features, and internal tools to protect Box and customers.
• Engineer end-to-end applications and backend services with strong foundations in modern data stores, application frameworks, and scalable architectures.
• Build systems and automation to detect, prevent, and mitigate security threats at scale.
• Create “paved road” frameworks, libraries, and guardrails that make secure development seamless and standard for Box engineers.
• Develop security automation and verification controls integrated into Box CI/CD pipelines.
• Architect and implement AI security controls, evaluation frameworks, and automated protections across product verticals.
• Partner closely with Product and Engineering teams to deliver elegant, scalable security software solutions.

What you bring

• 4+ years of professional software development experience in languages such as Java, Python, PHP, Go, or Scala.
• Proven ability to build end-to-end applications, including experience with databases, modern frameworks, and API design.
• Strong software engineering fundamentals across object-oriented and functional design, system architecture, automated testing, reliability, and code quality.
• Foundational understanding of security concepts and a strong passion for solving security problems through software engineering (deep security specialization is not required).
• Ability to break down complex technical problems into clean, scalable, maintainable systems.
• Strong analytical and problem-solving skills, with excellent communication and cross-functional collaboration.
• Bachelor’s degree in Computer Science, a related technical field, or equivalent practical experience.

Technologies you may work with

• Java, Python, PHP, Go, Scala
• Kafka, RabbitMQ, SQS
• Java Spring, Spring Boot
• AWS, GCP, Azure
• Terraform

Preferred skills

• Experience or familiarity with distributed systems, microservices architectures, or message queues (e.g., Kafka, RabbitMQ, SQS).
• Experience with Java Spring / Spring Boot.
• Familiarity with public cloud platforms (AWS, GCP, Azure) and Infrastructure as Code (e.g., Terraform).
• Familiarity with AI/ML systems, LLMs, or AI application security.

Compensation: USD 211,000 - 263,500 per year.