Box is looking for a Staff Enterprise Security Engineer to join their Enterprise Security team. The role will involve designing and driving security initiatives across identity, endpoint, network, SaaS, and AI-enabled systems. The engineer will partner with IT, infrastructure, and security teams to build resilient, scalable security architectures that enable productivity while reducing risk.
Requirements
- Bachelor's or Master's degree in computer science, information security or related field
- 8+ years of experience in corporate/enterprise security engineering (endpoint, network security, cloud security, SaaS security, identity, or a combination)
- Deep expertise in macOS security with solid knowledge of Windows and ChromeOS
- Hands-on experience deploying and operating at scale for a combination of device trust and endpoint detection solutions, ZTNA/zero trust architectures, VPNs and hybrid/in-office deployments, identity and access management, CASB/Secure web gateway, SSPM and DLP solutions
- Strong understanding of emerging security challenges: shadow IT, AI & Agentic identities, SaaS-to-SaaS integrations, browser security and data exfiltration paths
- Experience with security automation using Python, Go, or similar languages
- Proficiency with SIEM platforms (Splunk, Elastic, SumoLogic) for log analysis and rule creation
- Experience securing cloud-native and hybrid environments (AWS, GCP, Azure)
- Familiarity with IaC (Terraform), CI/CD pipelines, and DevSecOps practices
- Understanding of AI security risks and experience securing AI-centric deployments
- Exceptional communication skills with ability to translate complex security topics for all audiences
- Proven ability to work independently with high autonomy, manage ambiguity, and recommend secure but risk profiled decisions
Benefits
- Healthcare benefits
- Generous Paid Time Off
- 401k Matching
- Relocation Assistance
- Four Day Work Week
- Generous Parental Leave
- Tuition Reimbursement