SWE III, Device Security

WHAT IS BOX?

Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. We help companies thrive in the new AI-first era of business. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia.

By joining Box, you will have the unique opportunity to continue driving our platform forward. Content powers how we work. It’s the billions of files and information flowing across teams, departments, and key business processes every single day: contracts, invoices, employee records, financials, product specs, marketing assets, and more. Our mission is to bring intelligence to the world of content management and empower our customers to completely transform workflows across their organizations. With the combination of AI and enterprise content, the opportunity has never been greater to transform how the world works together and at Box you will be on the front lines of this massive shift.

Why Box Needs You

We’re looking for a Software Engineer to join the Device Security team. This team is responsible for some of the most critical systems at Box—ensuring only trusted devices can access our Intelligent Content Management platform. As businesses demand increasingly sophisticated controls over user access, this team’s work is central to Box’s security and compliance posture. In this role, you'll drive key initiatives in the secure access space, partnering closely with product, security, and infrastructure teams. We’re looking for a technically strong engineer who thrives on platform-level thinking, has experience working with large-scale systems, and is motivated by the challenges of building highly available, secure services for enterprise customers.

You’ll join a team of talented engineers and have significant influence in shaping our systems for the future. We’re seeking someone who brings discipline, depth, and a thoughtful approach to engineering in a mission-critical environment.

What You’ll Do

• Design, build, and maintain mission-critical enterprise software that enforces trusted access to Box from client devices and platforms like Web, Mobile and Desktop.
• Lead the development of software components in the authentication and secure access domain, ensuring they are resilient, performant, and secure.
• Build and own key services end-to-end—from architecture and design to implementation and deployment. Ensure high system availability and performance through observability, alerting and on-call support.
• Drive architectural discussions and help guide the evolution of Box’s security infrastructure.
• Collaborate closely with other engineers, product managers and security teams to define and deliver robust secure device management and access control capabilities over multiple-quarter long initiatives.
• Participate in our on-call rotation, available at all times while on-call to help respond to and triage any issues that arise.

Who You Are

• We are an AI-first company. This means you approach your work with a growth mindset and find ways to leverage AI to help make faster, smarter decisions that will 10X your impact at Box.
• You have 3+ years of experience in backend development, including leading significant technical initiatives.
• You’ve worked on mission-critical systems, ideally in areas like identity, authentication, OAuth, or access control.
• You write clean, maintainable code in Java.
• You think in terms of platforms, not just features—you build with extensibility and maintainability in mind.
• You have experience operating large-scale distributed systems with high uptime and security expectations.
• You’re comfortable mentoring engineers and collaborating across cross-functional teams.
• You thrive in a well-structured environment and enjoy building scalable solutions in established, mature systems

Additional points for

• Experience in enterprise security or authentication domains.
• Familiarity with zero trust models and device posture management.
• Experience with cloud platforms like GCP, AWS, or Azure.
• Familiarity with JavaScript, TypeScript, PHP and React.
• Prior experience working on internal platforms or systems that require high reliability and compliance

We are an AI-first company. This means you approach your work with a growth mindset and find ways to leverage AI to help make faster, smarter decisions that will 10X your impact at Box.

Methodology

• Agile management - Scrum
• Issue tracking tool - Jira
• Knowledge repository - GitHub Enterprise
• Code reviews - GitHub Enterprise 
• Version control system - GIT

Box lives its values, with community and in-person collaboration being a core part of our culture. Boxers are expected to work from their assigned office a minimum of 3 days per week, with a focus on Tuesdays and Thursdays. Your Recruiter will share more about how we work and company culture during the hiring process.

EQUAL OPPORTUNITY

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability, and any other protected ground of discrimination under applicable human rights legislation.
For details on how we protect your information when you apply, please see our Personnel Privacy Notice.
For more details on how Box Poland protects your information, please see our Supplemental Personnel and Candidate Privacy Notice. 

#LI-PK1 #LI-Hybrid