Staff Product Manager, AI Security

Box•Redwood City, CA

9h•$217,000 - $271,000•Onsite

About The Position

As Staff Product Manager for AI Security, you will define and execute the product vision and roadmap for securing agentic AI capabilities, autonomous workflows, and generative AI integrations across the Box Intelligent Content Management platform. This high-impact individual-contributor role involves building defenses for Box’s native agentic capabilities, including Box Agent, and external integrations with third-party agents and foundation models through Model Context Protocol (MCP) and enterprise APIs. You will work with AI/ML engineers, security architects, red-team researchers, and corporate security teams to translate emerging AI threat intelligence into scalable platform guardrails and enterprise security controls. Box expects employees to work from their assigned office at least three days per week. The role is eligible for equity and benefits. The Redwood City base salary range is $217,000–$271,000 USD; actual compensation depends on factors including skills, experience, and work location.

Requirements

At least 8 years of product management experience building and scaling enterprise B2B SaaS security products, cybersecurity platforms, cloud security solutions, or AI/ML infrastructure platforms.
Deep expertise in AI/ML security, LLM application security, prompt injection defense, agentic guardrail frameworks, or model alignment and safety systems.
A proven track record developing product strategies for agentic architectures, multi-agent coordination, tool-use and function-calling security, or model integration protocols such as MCP.
Strong understanding of emerging threats to autonomous AI systems, including multi-turn adversarial attacks, indirect injection through ingested content, and coordinated agentic attack swarms.
Technical acumen to partner with AI/ML research and engineering leaders on vector embeddings, semantic evaluation models, LLM latency trade-offs, API gateway security, and zero-trust data access control.
Exceptional analytical capability to define guardrail telemetry, measure threat-mitigation efficacy, and balance safety barriers with responsive AI interactions.
Executive presence to influence C-level security leaders and align cross-functional stakeholders.
Willingness to work from the assigned office at least three days per week.

Nice To Haves

Experience with frontier AI/LLM models, prompt evaluation frameworks, AI red-teaming, or real-time guardrail runtime libraries such as NeMo Guardrails, Llama Guard, or proprietary guardrail pipelines.
Hands-on familiarity with MCP, agent orchestration frameworks, or semantic router architectures.
Familiarity with enterprise compliance standards, zero-trust architectures, data loss prevention, or AI governance frameworks such as NIST AI RMF or ISO 42001.
Bachelor’s or master’s degree in Computer Science, Cybersecurity, Artificial Intelligence, Engineering, or equivalent practical experience.

Responsibilities

Define and execute the product strategy, technical vision, and roadmap for AI Security and Agentic Guardrails across Box AI, Box Shield, and the broader Box platform.
Build agent guardrail frameworks and policy engines to monitor, evaluate, and constrain autonomous agent behavior across Box Agent, custom workflow agents, and external model integrations.
Secure MCP-based and third-party AI API connectivity through authentication, context-boundary isolation, dynamic permissioning, and secure tool execution.
Develop layered defenses against AI threats, including direct and indirect prompt injection, jailbreaking, training data extraction, system prompt leakage, and coordinated agentic attack swarms.
Partner with Engineering, Applied AI/ML Research, Security Architecture, and UX Design to deliver low-latency, enterprise-grade AI security controls while preserving developer velocity and user experience.
Drive business and security efficacy metrics, including guardrail evaluation accuracy, prompt injection prevention rates, MCP integration adoption, and Shield/Enterprise Plus security revenue growth.
Collaborate with Product Marketing, Sales, Customer Success, and Compliance on go-to-market strategy and positioning Box as a trusted provider of enterprise agentic AI.
Engage with enterprise customers, AI security working groups, and industry analysts to anticipate evolving attack vectors, validate product requirements, and guide industry best practices.