Senior Application Security Engineer, Box
$148.5-218k
+ Equity
Securely manage, share and access your content from anywhere
Job no longer available
Securely manage, share and access your content from anywhere
1001+ employees
Job no longer available
$148.5-218k
+ Equity
1001+ employees
Company mission
To make it easy to access information from anywhere and collaborate with anyone. Its mission is to power how the world works together.
Role
Who you are
- You have 5+ years of experience with creating secure coding requirements, conducting threat models and pen testing software end-to-end
- You are passionate about working with developers to help them develop code securely
- Expert in determining the severity of a vulnerability and their impact to the business
- Expert with common security testing methodologies, including fuzz testing and using tools like Burp Suite
- Experience with the process of developing, building, and shipping secure code
- Understand secure engineering best practices, can articulate problem statements and propose solutions to both technically savvy and non-technical audiences
- Experience with multiple languages such as Java, React, Node JS, PHP, Scala, C and/or Python to perform secure code reviews
- Understand how to detect and prioritize Front End, API's, Microservices and Container vulnerabilities
- You have a passion for cyber security demonstrated through participation/leadership in webinars, Capture the Flag (CTF), TryHackMe, Hack The Box, Bug Bounty Programs, submission of CVEs and/or personal security projects
- Strong understanding of past, current, and emerging security exploits and the TTPs (tactics, techniques, and procedures) threat actor groups leverage
- Ability to communicate and report to various levels of technical and non technical stakeholders
What the job involves
- Box is looking for a Senior Application Security Engineer who will focus on thinking like a threat actor to proactively find security gaps and partner with development teams to close those gaps quickly
- You will own the end-to-end secure development requirements, discovery of vulnerabilities through PenTesting and identifying remediation tactics specific to the product tech stack
- Conduct product/feature level Design Reviews, Code Reviews, Threat Modeling, Penetration Testing and Conducing Vulnerability Risk Analysis
- Lead manual security reviews and create secure coding requirements
- Discover vulnerabilities through web and mobile penetration testing
- Evaluate products for how a threat actor could leverage user-facing flows for malicious activity
- Deliver reports on completed tests and document technical issues identified during the assessments
- Collaborate with Product, Engineering and broader security teams to provide recommendations for solutions focused on decreasing business risks
- Support the Bug Bounty/VDP program through triaging submissions and proposing remediations
- Identify and maintain standards and procedures around the use of open source software
Our take
Large enterprises are always in need of solutions that connect their people, data, and applications. Box is a cloud content management company that has partnerships with huge technology companies like IBM and Microsoft which is giving them credibility and helping it expand in Europe and Asia.
The trend for businesses to switch to cloud computing is unlikely to slow down any time soon, giving Box a wave to ride, so growth should continue for a long time.
Box recently signed up a group of leading universities to help with their digital transformation and modernising their IT strategy. They're continuing to find innovative ways to help businesses move to cloud services.
Steph
Company Specialist at Welcome to the Jungle
Insights
13% employee growth in 12 months
Company
Company benefits
- Flexible working-hybrid model of work
- Sign-on RSUs
- Employee stock purchase plan to purchase discounted Box stock
- Your birthday off within a two week window
- 3 x paid charity days to use own your own, with your team or Box.org
- 100% top up 20 week paid maternity leave. 100 % paid 12 week paternity leave
- Fertility and surrogacy support. Box reimburses 100% of eligible cost up to £7,600
- Private consultation support for all expecting and new parents
- Subscription to headspace and spring health
- Paid sabbatical leave up to 4 weeks for all Boxers who have 7 years of service
Company values
- Blow our customers' minds - Boxers wake up every morning and think about how they can make our customers happy. We're always asking, "What can we do better?"
- Bring your ___self to work - Box recruits a diverse group of people with interesting backgrounds and values — and we wouldn't have it any other way. You fill in the blank, and own who you are
- Be an owner. It's your company too - Box truly believes that the most epic dreams are possible. Don't ever let anyone tell you that your ideas aren't feasible. Own your ideas and take Box to new and exciting horizons
- Take risks. Fail fast. GSD - We encourage everyone to take risks and move past slow decision-making. If we fail fast, we can iterate and learn from our mistakes
- Make mum proud - Do right by your colleagues, customers and community
- Be candid and assume good intent - Listen to one another, share feedback, and make a conscious effort to be your best
- 10x it! - The bigger the better - especially when it comes to ideas. Dream up something big, then 10x it!
Company HQ
Centennial, Redwood City, CA
Articles
Leadership
Aaron Levie
(Co-Founder & CEO)Aaron originally developed Box as a college project at the University of Southern California and dropped out of college to work on it full-time.
Dylan Smith
(Co-Founder & CFO)Dylan Smith, Box's co-founder and Chief Financial Officer, was Aaron's childhood friend.
People progressing
Joined as a Senior Enterprise Customer Success Manager and was promoted to Team Lead, then Manager and Sr. Manager. Now, Laura is the Team Director of Customer Success.
Joined as an Implementation Consultant I. Then promoted to Implementation Consultant II after 1 year. Moved to Solutions Engineering III before being promoted to their current position as Staff Solutions Engineer.
Kenneth started at Box as a Commercial AE. He was promoted within the sales team 4 times before moving into a Team Director role for the Commercial Sales team!
Elena began as a Sales Development Representative and was promoted twice. Now she is the Team Manager for the Lead Generation team!
Diversity, Equity & Inclusion at Box
Takayla King (Head of Belonging)
- Our company is built on people: We call them Boxers. They come from a range of backgrounds and experiences, and each has a unique story to tell. Our goal is to fully leverage and engage the individual talents and capabilities of our diverse teams, ultimately creating an inclusive environment where Boxers feel they belong. Our company values and diversity, inclusion and belonging initiatives are intentionally designed to lift up each and every member of the Box team.
- Our Employee Resource Communities (ERCs) are employee-led affinity groups that support a culture of belonging globally. Available both remotely and across office locations, ERCs bring Box culture and values to each region while remaining inclusive of Boxers worldwide. All Boxers are welcome and encouraged to engage in ERC programming and events.
Share this job
View 6 more jobs at Box