Senior Software Engineer, Device Security

Box is the world’s leader in Intelligent Content Management. We are trusted by more than 115K organizations around the world today, including nearly 70% of the Fortune 500 and leaders across deeply regulated industries (such as AstraZeneca, JLL, and Nationwide), to protect their data, fuel collaboration, and power critical workflows with secure, enterprise AI.

By joining Box, you will have the unique opportunity to continue driving our platform forward. Content powers how we work. It’s the billions of files and information flowing across teams, departments, and key business processes every single day: contracts, invoices, employee records, financials, product specs, marketing assets, and more. Our mission is to bring intelligence to the world of content management and empower our customers to completely transform workflows across their organizations. With the combination of AI and enterprise content, the opportunity has never been greater to transform how the world works together and at Box you will be on the front lines of this massive shift.

Founded in 2005, Box is headquartered in Redwood City, CA, and we have offices across the United States, Europe, and Asia.

We’re looking for a Senior Software Engineer to join the Device Security team. This team is responsible for some of the most critical systems at Box—ensuring only trusted devices can access our Intelligent Content Management platform. As businesses demand increasingly sophisticated controls over user access, this team’s work is central to Box’s security and compliance posture. In this role, you'll drive key initiatives in the secure access space, partnering closely with product, security, and infrastructure teams. We’re looking for a technically strong engineer who thrives on platform-level thinking, has experience working with large-scale systems, and is motivated by the challenges of building highly available, secure services for enterprise customers.

You’ll join a team of talented engineers and have significant influence in shaping our systems for the future. We’re seeking someone who brings discipline, depth, and a thoughtful approach to engineering in a mission-critical environment.

• →Design, build, and maintain mission-critical enterprise software that enforces trusted access to Box from client devices and platforms like Web, Mobile and Desktop.
• →Lead the development of software components in the authentication and secure access domain, ensuring they are resilient, performant, and secure.
• →Build and own key services end-to-end—from architecture and design to implementation and deployment. Ensure high system availability and performance through observability, alerting and on-call support.
• →Drive architectural discussions and help guide the evolution of Box’s security infrastructure.
• →Collaborate closely with other engineers, product managers and security teams to define and deliver robust secure device management and access control capabilities over multiple-quarter long initiatives.
• →Participate in our on-call rotation, available at all times while on-call to help respond to and triage any issues that arise.

• We are an AI-first company. This means you approach your work with a growth mindset and find ways to leverage AI to help make faster, smarter decisions that will 10X your impact at Box.
• You have 10+ years of experience in backend development, including leading significant technical initiatives.
• You’ve worked on mission-critical systems, ideally in areas like identity, authentication, OAuth, or access control.
• You write clean, maintainable code in Java.
• You think in terms of platforms, not just features—you build with extensibility and maintainability in mind.
• You have experience operating large-scale distributed systems with high uptime and security expectations.
• You’re comfortable mentoring engineers and collaborating across cross-functional teams.
• You thrive in a well-structured environment and enjoy building scalable solutions in established, mature systems
  
  

• Experience in enterprise security or authentication domains.
• Familiarity with zero trust models and device security posture management.
• Experience with Kubernetes and cloud platforms like GCP, AWS, or Azure.
• Experience with PHP, TypeScript and React.
• Prior experience working on internal platforms or systems that require high reliability and compliance

• Agile management - Scrum
• Issue tracking tool - Jira
• Knowledge repository - GitHub Enterprise
• Code reviews - GitHub Enterprise 
• Version control system - GIT

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability, and any other protected ground of discrimination under applicable human rights legislation.
For details on how we protect your information when you apply, please see our Personnel Privacy Notice.
For more details on how Box Poland protects your information, please see our Supplemental Personnel and Candidate Privacy Notice. 

#LI-OB1 #LI-hybrid