Staff Product Manager, AI Security

Box•Redwood City, CA

20h•Hybrid

About The Position

As Staff Product Manager for AI Security, you will define and execute the product vision and roadmap for securing agentic AI capabilities, autonomous workflows, and generative AI integrations across the Box Intelligent Content Management platform. You will build and scale defenses for Box’s native agentic capabilities, including Box Agent, as well as integrations with third-party agents and foundation models through Model Context Protocol (MCP) and enterprise APIs. You will work with AI/ML engineers, security architects, red-team researchers, and corporate security teams to turn emerging AI threat intelligence into scalable platform guardrails and enterprise security controls. The position is an individual contributor role focused on delivering AI security across Box AI, Box Shield, and the broader platform ecosystem, while supporting enterprise-grade security without undermining developer velocity or user experience. The role is expected to work from an assigned office at least three days per week. The position is eligible for equity and benefits. The Redwood City base salary range is $217,000–$271,000 USD.

Requirements

At least 8 years of product management experience building and scaling enterprise B2B SaaS security products, cybersecurity platforms, cloud security solutions, or AI/ML infrastructure platforms.
Deep expertise in AI/ML security, LLM application security (such as the OWASP Top 10 for LLM Applications), prompt injection defense, agentic guardrail frameworks, or model alignment and safety systems.
A record of developing product strategies for agentic architectures, multi-agent coordination, tool-use and function-calling security, or model integration protocols such as MCP.
Strong understanding of emerging threats to autonomous AI systems, including multi-turn adversarial attacks, indirect injection through ingested content, and coordinated agentic attack swarms.
Technical acumen to partner with AI/ML research and engineering leaders on vector embeddings, semantic evaluation models, LLM latency trade-offs, API gateway security, and zero-trust data access control.
Exceptional analytical capability to define guardrail telemetry, measure threat mitigation efficacy, and balance safety barriers with responsive AI interactions.
Executive presence and ability to influence C-level security leaders and align cross-functional stakeholders.
Approach work with a growth mindset and leverage AI to make faster, smarter decisions.

Nice To Haves

Experience with frontier AI/LLM models, prompt evaluation frameworks, AI red-teaming, or real-time guardrail runtime libraries such as NeMo Guardrails, Llama Guard, or proprietary guardrail pipelines.
Hands-on familiarity with MCP, agent orchestration frameworks, or semantic router architectures.
Familiarity with enterprise compliance standards, zero-trust architectures, data loss prevention, or AI governance frameworks such as NIST AI RMF and ISO 42001.
Bachelor’s or master’s degree in Computer Science, Cybersecurity, Artificial Intelligence, or Engineering, or equivalent practical experience.

Responsibilities

Define and execute product strategy, technical vision, and roadmap for AI Security and Agentic Guardrails across Box AI, Box Shield, and the broader Box platform.
Build agent guardrail frameworks and policy engines to monitor, evaluate, and constrain autonomous agent behavior across Box Agent, custom workflow agents, and external model integrations.
Secure MCP-based connectivity and third-party AI APIs through authentication, context-boundary isolation, dynamic permissioning, and secure tool execution.
Develop layered defenses against AI threats, including direct and indirect prompt injection, jailbreaking, training data extraction, system prompt leakage, and coordinated agentic attack swarms.
Partner with Engineering, Applied AI/ML Research, Security Architecture, and UX Design to deliver low-latency, enterprise-grade AI security controls.
Define and track business and security efficacy metrics, including guardrail evaluation accuracy, prompt injection prevention rates, MCP integration adoption, and Shield / Enterprise Plus security revenue growth.
Collaborate with Product Marketing, Sales, Customer Success, and Compliance on go-to-market strategy and positioning Box as a trusted enterprise agentic AI provider.
Engage with enterprise customers, AI security working groups, and industry analysts to anticipate emerging attack vectors, validate product requirements, and guide industry best practices.