Security Tooling Engineer II
Core
Build and operate infrastructure security tooling (monitoring, vulnerability scanning, DLP, hardening) for Box's multi-cloud environment to reduce data exposure and configuration risk.
Role type
Mid-level IC security tooling engineer (infrastructure)
Builds
Cloud-native security tooling, policy enforcement, and monitoring systems
Domain
Cloud security, Infrastructure as Code, Data Loss Prevention
Deliverable
infrastructure
Required skills
Terraform, Terragrunt, OVAL, Rego, Python/Java/Go/Node.js, REST APIs, CI/CD automation, DLP policy authoring, regex patterns
Preferred skills
FedRAMP, SOC 2, PCI, HIPAA compliance frameworks, classification and tagging, data exfiltration prevention
Technologies
Terraform, Terragrunt, OVAL, Rego, Python, Java, Go, Node.js
Responsibilities
Deploy and maintain cloud-native security tooling; implement configuration checks using OVAL and Rego; automate detection and remediation of misconfigurations; build monitoring and alerting; produce audit reports and evidence artifacts; collaborate with Legal, Privacy, and Compliance teams.
Seniority
Mid-level, hands-on IC
