WHAT IS BOX?

Box is the market leader for Cloud Content Management. Our mission is to power how the world works together. Box is partnering with enterprise organizations to accelerate their digital transformation by creating a single platform for secure content management, collaboration and workflow. We have an amazing opportunity to further establish ourselves as leaders in the space, and we need strong advocates to help us achieve that goal. 

By joining Box, you will have the unique opportunity to help capture a majority of this developing market and define what content management looks like for the digital enterprise. Today, Box powers over 100,000 businesses, including 70% of the Fortune 500 who trust Box to manage their content in the cloud. 

WHY BOX NEEDS YOU?

The Data Security Engineer will integrate with cross-functional teams to help solve complex Security Engineering challenges, challenges that will only grow as Box hits exabyte scale as well the implementation of the ideas.This role will directly impact the experience of Box’s 85 million users and Box’s ability to scale profitably as we grow. 

• Work with our Data Engineering teams to develop mechanisms that provide safety and security to both our data as well as our global infrastructure
• Build authorization frameworks to provide fine grained and data centric access controls
• Implement security capabilities covering key management, encryption, anonymization, data masking, tokenization, auditing and governance
• Provide security expertise and guidance to Engineering Teams on metadata management, data tagging, and security focused data analytics
• Perform hands-on threat modeling, risk assessment, and data security validation
• Support and grow a high performing organization that is building the services that stop attackers and help drive preventative measures throughout Box's systems and production environment

• 4+ years of experience building data and storage systems in a Mid-Senior role with a core focus on Data Security
• Experience working with MySQL, HBase, Bigtable, or similar technologies
• 3+ years of experience working AWS, GCP, Kubernetes and Terraform
• Proficient in developing and/or extending solutions in Java and Scala
• Experienced in securing data using methods such as: encryption, IAM, secrets management
• Experienced in deploying hardening protections at the endpoint where access to services must be authenticated, authorized, and encrypted instead of solely relying on the protections at the network perimeter
• Comfortable explaining technical details to a colleague or presenting to a room full of engineers, as well as broad experience engaging with disparate internal customers
• Understanding of industry security frameworks such as CIS, NIST, ISO, SOC2, etc.
• Experience with CASB solutions is a plus