Senior Software Engineer, Application Security

Box•Redwood City, CA

5d•$211,000 - $263,500•Hybrid

About The Position

The Senior Software Engineer will join Box’s Application Security Engineering team to build production-grade systems, services, and software automation that protect Box and its customers from attackers, vulnerabilities, and abuse. The role designs, builds, deploys, and operates security services and developer guardrails within Box products, infrastructure, and software development lifecycle. The engineer will create end-to-end applications and backend services, security detection and mitigation systems, secure-development frameworks, CI/CD verification controls, and AI security protections. The role partners closely with Product and Engineering teams to turn complex security challenges into scalable software solutions. Box expects employees to work from their assigned office at least three days per week.

Requirements

At least 4 years of professional software development experience in languages such as Java, Python, PHP, Go, or Scala.
Proven experience building end-to-end applications, including databases, modern frameworks, and API design.
Strong software engineering fundamentals in object-oriented and functional design, system architecture, automated testing, reliability, and code quality.
Foundational understanding of security concepts and strong interest in solving security challenges through software engineering.
Ability to break down complex technical problems and translate them into clean, scalable, maintainable software systems.
Strong analytical, problem-solving, communication, and cross-functional collaboration skills.
Bachelor’s degree in Computer Science or a related technical field, or equivalent practical experience.

Nice To Haves

Experience or familiarity with distributed systems, microservices architectures, or message queues such as Kafka, RabbitMQ, or SQS.
Experience with Java Spring or Spring Boot.
Familiarity with public cloud platforms such as AWS, GCP, or Azure and Infrastructure as Code such as Terraform.
Familiarity with AI/ML systems, LLMs, or AI application security.

Responsibilities

Design, build, and operate production-grade security services, features, and internal tools that protect Box and its customers.
Engineer end-to-end applications and backend services using modern data stores, application frameworks, and scalable architectures.
Build systems and automation to detect, prevent, and mitigate security threats at scale.
Develop developer frameworks, libraries, and guardrails that make secure development seamless and standard for Box engineers.
Build security automation and verification controls integrated into Box CI/CD pipelines.
Architect and implement AI security controls, evaluation frameworks, and automated protections across product verticals.
Partner with Product and Engineering teams to turn complex security challenges into scalable software solutions.