Senior Software Engineer, Application Security

Box is building production-grade security capabilities that fit directly into how software is developed, tested, and delivered. In this Senior Software Engineer role focused on Application Security, you will design and deliver security automation, internal tooling, and developer guardrails that integrate with Box products and CI/CD.

This position centers on engineering security controls across the SDLC, including the systems needed to evaluate, verify, and operate protections at scale, with an emphasis on scalable software design and practical security engineering.

What you’ll do

• Design, build, and operate production-grade security services, features, and internal tools that protect Box and its customers.
• Engineer end-to-end applications and backend services using modern data stores, application frameworks, and scalable architectures.
• Build systems and automation to detect, prevent, and mitigate security threats at scale.
• Create “paved road” frameworks, libraries, and guardrails so secure development becomes seamless and standard across Box engineering.
• Develop security automation and verification controls integrated into Box CI/CD pipelines.
• Architect and implement AI security controls, evaluation frameworks, and automated protections across product verticals.
• Work closely with Product and Engineering teams to turn complex security challenges into elegant, scalable software.

Required qualifications

• 4+ years of professional software development experience in languages such as Java, Python, PHP, Go, or Scala.
• Proven ability to build end-to-end applications, with experience across databases, modern frameworks, and API design.
• Strong software engineering fundamentals across object-oriented and functional design, system architecture, automated testing, reliability, and code quality.
• A foundational understanding of security concepts and a passion for solving security problems through software engineering (deep security specialization is not required).
• Ability to break down complex technical problems into clean, scalable, and maintainable systems.
• Strong analytical, problem-solving, communication, and cross-functional collaboration skills.
• Bachelor’s degree in Computer Science, a related technical field, or equivalent practical experience.

Technologies you may work with

• Languages/Frameworks: Java, Python, PHP, Go, Scala, Java Spring, Spring Boot
• Messaging: Kafka, RabbitMQ, SQS
• Cloud & Infrastructure: AWS, GCP, Azure, Terraform

Preferred skills

• Experience or familiarity with distributed systems, microservices, or message queues such as Kafka, RabbitMQ, or SQS.
• Experience with Java Spring / Spring Boot.
• Familiarity with AWS, GCP, Azure and Infrastructure as Code such as Terraform.
• Familiarity with AI/ML systems, LLMs, or AI application security.

Location: Redwood City, CA (hybrid)
Compensation: USD 211,000 - 263,500 per year