Senior Application Security Engineer, Box
$148.5-218k
+ Equity
Securely manage, share and access your content from anywhere
Open for applications
Securely manage, share and access your content from anywhere
1001+ employees
Open for applications
$148.5-218k
+ Equity
1001+ employees
Company mission
Box's vision is to make it easy to access information from anywhere and collaborate with anyone. Its mission is to power how the world works together.
Role
Who you are
- You have 5+ years of experience with creating secure coding requirements, conducting threat models and pen testing software end-to-end
- You are passionate about working with developers to help them develop code securely
- Expert in determining the severity of a vulnerability and their impact to the business
- Expert with common security testing methodologies, including fuzz testing and using tools like Burp Suite
- Experience with the process of developing, building, and shipping secure code
- Understand secure engineering best practices, can articulate problem statements and propose solutions to both technically savvy and non-technical audiences
- Experience with multiple languages such as Java, React, Node JS, PHP, Scala, C and/or Python to perform secure code reviews
- Understand how to detect and prioritize Front End, API's, Microservices and Container vulnerabilities
- You have a passion for cyber security demonstrated through participation/leadership in webinars, Capture the Flag (CTF), TryHackMe, Hack The Box, Bug Bounty Programs, submission of CVEs and/or personal security projects
- Strong understanding of past, current, and emerging security exploits and the TTPs (tactics, techniques, and procedures) threat actor groups leverage
- Ability to communicate and report to various levels of technical and non technical stakeholders
What the job involves
- Box is looking for a Senior Application Security Engineer who will focus on thinking like a threat actor to proactively find security gaps and partner with development teams to close those gaps quickly
- You will own the end-to-end secure development requirements, discovery of vulnerabilities through PenTesting and identifying remediation tactics specific to the product tech stack
- Conduct product/feature level Design Reviews, Code Reviews, Threat Modeling, Penetration Testing and Conducing Vulnerability Risk Analysis
- Lead manual security reviews and create secure coding requirements
- Discover vulnerabilities through web and mobile penetration testing
- Evaluate products for how a threat actor could leverage user-facing flows for malicious activity
- Deliver reports on completed tests and document technical issues identified during the assessments
- Collaborate with Product, Engineering and broader security teams to provide recommendations for solutions focused on decreasing business risks
- Support the Bug Bounty/VDP program through triaging submissions and proposing remediations
- Identify and maintain standards and procedures around the use of open source software
Our take
Large enterprises are always in need of solutions that connect their people, data, and applications. Box is a cloud content management company that has partnerships with huge technology companies like IBM and Microsoft which is giving them credibility and helping it expand in Europe and Asia.
The trend for businesses to switch to cloud computing is unlikely to slow down any time soon, giving Box a wave to ride, so growth should continue for a long time.
Box recently signed up a group of leading universities to help with their digital transformation and modernising their IT strategy. They're continuing to find innovative ways to help businesses move to cloud services.
Steph
Company Specialist at Welcome to the Jungle
Insights
13% employee growth in 12 months
Company
Funding (last 2 of 12 rounds)
Jul 2014
$150m
SERIES G
Dec 2013
$100m
SERIES F
Total funding: $564.1m
Company benefits
- Flexible working-hybrid model of work
- Sign-on RSUs
- Employee stock purchase plan to purchase discounted Box stock
- £40 ($55) a month gym/wellness allowance
- Your birthday off within a two week window
- 3 x paid charity days to use own your own, with your team or Box.org
- 100% top up 20 week paid maternity leave. 100 % paid 12 week paternity leave
- Fertility and surrogacy support. Box reimburses 100% of eligible cost up to £7,600
- Private consultation support for all expecting and new parents
- Subscription to headspace and spring health
- Paid sabbatical leave up to 4 weeks for all Boxers who have 7 years of service
Company values
- Blow our customers' minds - Boxers wake up every morning and think about how they can make our customers happy. We're always asking, "What can we do better?"
- Bring your ___self to work - Box recruits a diverse group of people with interesting backgrounds and values — and we wouldn't have it any other way. You fill in the blank, and own who you are
- Be an owner. It's your company too - Box truly believes that the most epic dreams are possible. Don't ever let anyone tell you that your ideas aren't feasible. Own your ideas and take Box to new and exciting horizons
- Take risks. Fail fast. GSD - We encourage everyone to take risks and move past slow decision-making. If we fail fast, we can iterate and learn from our mistakes
- Make mum proud - Do right by your colleagues, customers and community
- Be candid and assume good intent - Listen to one another, share feedback, and make a conscious effort to be your best
- 10x it! - The bigger the better - especially when it comes to ideas. Dream up something big, then 10x it!
Company HQ
Centennial, Redwood City, CA
Articles
Leadership
Aaron Levie
(CEO)Aaron originally developed Box as a college project at the University of Southern California and dropped out of college to work on it full-time.
Dylan Smith
(CFO)Dylan Smith, Box's co-founder and Chief Financial Officer, was Aaron's childhood friend
People progressing
Joined as a Senior Enterprise Customer Success Manager and was promoted to Team Lead 3 years later. Then after 9 months was promoted to Manager of Commercial and Scaled Customer Success. Then after 2 years was promoted to Senior Manager of Enterprise Customer Success
Joined as an Implementation Consultant I. Then promoted to Implementation Consultant II after 1 year. Moved to Solutions Engineering III 1 year later
Kenneth started at Box as a Commercial AE. He was promoted within our sales team 4 times before moving into a Sr. Manager role for our Commercial Sales team!
Elena started at Box as an Sales Development Representative and was promoted to an Outbound Business Representative after 1 year. After 1.5 years she was promoted to a Small Medium Business AE!
Diversity, Equity & Inclusion at Box
Takayla King (Head of Belonging)
- A place where community comes first. Our company is built on people: We call them Boxers. They come from a range of backgrounds and experiences, and each has a unique story to tell. Our goal is to fully leverage and engage the individual talents and capabilities of our diverse teams, ultimately creating an inclusive environment where Boxers feel they belong. Our company values and Diversity and Inclusion initiatives are intentionally designed to lift up each and every member of the Box team.
- Our Employee Resource Communities enables a culture that welcomes diverse perspectives, backgrounds, and ideas. Bring your (___) self to work means no matter who you are, where you're from, or what brings you to Box, we welcome the real you here
Share this job