[Hiring] Enterprise Application Security Engineer II @Box

Role Description

Box has a world class security organization responsible for protecting our customer and employee data around the globe. We are looking for an Application Security Engineer to be a part of our Enterprise Security team to help drive initiatives and scale the security systems that protect Box’s corporate environment.

• Design, implement, and maintain security controls that protect Box's enterprise applications, corporate infrastructure, and cloud services.
• Partner with IT, Enterprise Engineering, and business application owners to securely deploy, configure, and operate enterprise platforms, AI and SaaS applications.
• Perform security assessments and architecture reviews for new enterprise applications, integrations, and third-party vendors, recommending mitigations aligned with security best practices.
• Build and maintain security monitoring, dashboards, and automation to improve visibility into enterprise application risk, identity, and access.
• Develop and automate security controls for enterprise platforms, including identity, secrets management, privileged access, and application integrations.
• Support vulnerability management, incident response, and remediation efforts by identifying security gaps and driving risk reduction across the enterprise environment.

Qualifications

• Bachelor's or Master's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
• 3+ years of experience in enterprise security, application security, cloud security, or security engineering.
• Strong understanding of application security principles, including authentication and authorization, identity and access management (IAM), OAuth/OIDC/SAML, API security, secrets management, and secure application integrations.
• Hands-on experience securing enterprise application integrations across SaaS platforms such as Salesforce, Workday, or similar enterprise technologies.
• Experience with security technologies including EDR, DLP, email security, WAFs, vulnerability management, SIEM platforms (Splunk, Elastic, Sentinel, etc.), and cloud security services across AWS, GCP, and/or Azure.
• Experience with scripting or automation using Python, PowerShell, Go, or similar languages, and familiarity with REST APIs and infrastructure-as-code.
• Strong communication and collaboration skills.
• Familiarity with AI tools and services.

Requirements

• We are an AI-first company. This means you approach your work with a growth mindset and find ways to leverage AI to help make faster, smarter decisions that will 10X your impact at Box.

Benefits

• Box is committed to fair and equitable compensation practices. Actual base salary is dependent upon factors such as: knowledge, skill level, experience, and work location.
• This role is also eligible for equity and benefits.