Senior Software Engineer, Trust and Safety Engineering

Box•Redwood City, CA

2d•Hybrid

About The Position

Software Engineers on the Trust and Safety Engineering team play a critical role in protecting Box, its platform, and its customers from abuse, fraud, and malicious actors. This role is ideal for an engineer who combines strong software development fundamentals with a deep interest in security, threat mitigation, and building resilient systems at scale. The team partners closely with security, product, and engineering organizations across Box to design and deliver solutions that strengthen the company’s defenses while preserving a seamless customer experience. Much of this work is highly visible and directly customer-facing, shaping how users experience safety, reliability, and trust across the product. The systems built by this team have significant impact, and performance is essential because latency matters in delivering protections that are both effective and seamless. Work in this area spans a wide range of disciplines, including building and operating containerized microservices in a Kubernetes-based environment, developing behavioral detection systems and machine learning models to identify suspicious activity, tuning rate limiters and other mitigation controls across the Box stack, and delivering product security features that proactively reduce risk. This is an opportunity to make a direct impact by building intelligent, scalable systems that help Box stay ahead of evolving threats.

Requirements

6+ years of professional software development experience in one or more of the following languages: Java, Python, PHP, or Scala
Experience building containerized microservices in large-scale, distributed environments
Strong interpersonal, communication, and reporting skills
Strong analytical, system design, engineering, planning, and problem-solving skills
Bachelor’s degree in Computer Science or equivalent practical experience

Nice To Haves

Experience with machine learning models
Experience with large-scale datasets
Experience with Java Spring/Spring Boot
Experience with Terraform-based public cloud infrastructure
Experience with trust and safety, abuse, or fraud mitigation systems

Responsibilities

Design, build, and continuously improve security systems that protect Box, its platform, and its customers from abuse, fraud, malicious actors, and insider threats.
Develop scalable APIs and backend services that detect, prevent, and disrupt abuse campaigns across Box’s microservice infrastructure.
Build behavioral detection systems and near-real-time mitigation workflows to identify suspicious usage patterns, risky traffic, and emerging attack techniques.
Apply analytics and machine learning approaches to model malicious behavior, improve detection accuracy, and reduce false positives.
Strengthen platform defenses through rate limiting, automated enforcement, and other mitigation controls that balance security with customer experience.
Build resilient, containerized microservices in distributed environments that support high-volume trust and safety protections at scale.
Partner closely with security, product, and engineering teams to translate threat trends into durable product and platform safeguards.
Contribute to Box’s broader technical security strategy by identifying systemic risks, proposing defenses, and improving security engineering practices.
Proactively evaluate evolving abuse and fraud patterns to help Box stay ahead of new threats with intelligent, scalable protections.