Senior Software Engineer, Application Security

Box•Redwood City, CA

3d•Hybrid

About The Position

Box is seeking a software engineer to join its Application Security Engineering team. The team builds production-grade systems, services, and software automation to protect Box and its customers from attackers, vulnerabilities, and abuse. The role applies software engineering skills to security challenges by designing, building, deploying, and operating security services and developer guardrails within Box products, infrastructure, and software development lifecycle. The position focuses on end-to-end applications and backend services, scalable architectures and modern data stores, security threat detection and prevention, secure-development frameworks, CI/CD controls, and AI security protections. The engineer partners with Product and Engineering teams to deliver scalable software solutions. Boxers are expected to work from their assigned office at least three days per week. The role is eligible for equity and benefits. The Redwood City base salary range is $211,000–$263,500 USD.

Requirements

At least 4 years of professional software development experience in languages such as Java, Python, PHP, Go, or Scala.
Proven experience building end-to-end applications, including databases, modern frameworks, and API design.
Strong software engineering fundamentals in object-oriented and functional design, system architecture, automated testing, reliability, and code quality.
Foundational understanding of security concepts and a strong interest in solving security challenges through software engineering.
Ability to break down complex technical problems and create clean, scalable, maintainable software systems.
Strong analytical, problem-solving, communication, and cross-functional collaboration skills.
Bachelor's degree in Computer Science or a related technical field, or equivalent practical experience.

Nice To Haves

Experience or familiarity with distributed systems, microservices architectures, or message queues such as Kafka, RabbitMQ, or SQS.
Experience with Java Spring or Spring Boot.
Familiarity with public cloud platforms such as AWS, GCP, or Azure and Infrastructure as Code such as Terraform.
Familiarity with AI/ML systems, LLMs, or AI application security.

Responsibilities

Design, build, and operate production-grade security services, features, and internal tools that protect Box and its customers.
Engineer end-to-end applications and backend services using modern data stores, application frameworks, and scalable architectures.
Build systems and automation to detect, prevent, and mitigate security threats at scale.
Develop developer frameworks, libraries, and guardrails that make secure development seamless and standard across Box.
Build security automation and verification controls integrated into Box CI/CD pipelines.
Architect and implement AI security controls, evaluation frameworks, and automated protections across product verticals.
Partner with Product and Engineering teams to turn complex security challenges into scalable software solutions.