Security Tooling Engineer II

Location: Warsaw, Poland

About the Position

Join Box as a Security Tooling Engineer II in Warsaw, Poland, and help build and operate infrastructure security across our tooling stack. Box is the leader in Intelligent Content Management, and we are on the front lines of transforming how the world works together with AI.

Responsibilities

• Deploy and maintain cloud-native security tooling in our multi-cloud environment.
• Contribute to infrastructure and policy management using Terraform and Terragrunt.
• Implement cloud security configuration checks in tools that use OVAL and Rego.
• Patch and upgrade tooling deployments to maintain security, availability, and reliability.
• Build monitoring, metrics, and alerting for owned components.
• Automate detection and remediation of misconfigurations in CI/CD and runtime.
• Collaborate with Legal, Privacy, and Compliance to align tool implementation with regulatory needs.
• Produce reports and evidence artifacts for auditors and internal stakeholders.
• Engage in weekly stand-ups, team meetings, and manager 1:1s.
• Collaborate across global teams and participate in on-call rotation.

Requirements

• Education: BA/BS in Computer Science or related field.
• Experience: 2+ years of experience with cloud-native security tooling and infrastructure-as-code (Terraform preferred).
• Skills:
  • Working knowledge of configuration-as-code practices.
  • Familiarity with security policy engines (e.g., OVAL, Rego).
  • Working knowledge of policy-as-code practices.
  • Familiarity with REST APIs and at least one major language (Python, Java, Go, or Node.js).
  • Comfortable debugging across multiple system layers.
  • Interest in automation and security and privacy.
  • Strong communication skills in English.
  • Team-oriented with a growth mindset.

Nice to Have

• Experience contributing to classification, tagging, and policy enforcement.
• Experience with compliance frameworks such as FedRAMP, SOC 2, PCI, or HIPAA.

We Offer

• Competitive salary and equity.
• Flexible time off and sabbatical after seven years.
• Growth opportunities through learning programs and career paths.
• Hybrid work model blending in-person connection with remote flexibility.
• Global, inclusive benefits including mental health, wellbeing, and family support.
• Paid parental leave and fertility benefits.
• Monthly wellness subsidy for fitness.
• Community involvement through employee-led resource groups and paid volunteer time off.

About the Company

Box is the leader in Intelligent Content Management, empowering organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide. We are headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia.

At Box, we believe unique and diverse experiences benefit our culture, our products, our customers, our company, and our world. We aim to recruit a passionate, high-performing workforce that reflects the world we live in. If you are head-over-heels about this role but unsure if you meet all the requirements, we encourage you to apply!

EQUAL OPPORTUNITY

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability, and any other protected ground of discrimination under applicable human rights legislation.