Box Inc Deutschland is hiring a
Senior Application Security Engineer in United States

Summary

Box is seeking a Senior Application Security Engineer to proactively find security gaps, conduct security reviews, and collaborate with development teams to close those gaps. The position requires 5+ years of experience in creating secure coding requirements, conducting threat models, and pen testing software end-to-end.

Requirements

• 5+ years of experience with creating secure coding requirements, conducting threat models and pen testing software end-to-end
• Understand secure engineering best practices, can articulate problem statements and propose solutions to both technically savvy and non-technical audiences
• Experience with multiple languages such as Java, React, Node JS, PHP, Scala, C and/or Python to perform secure code reviews
• Understand how to detect and prioritize Front End, API's, Microservices and Container vulnerabilities

Responsibilities

• Conduct product/feature level Design Reviews, Code Reviews, Threat Modeling, Penetration Testing and Conducing Vulnerability Risk Analysis
• Lead manual security reviews and create secure coding requirements
• Discover vulnerabilities through web and mobile penetration testing
• Evaluate products for how a threat actor could leverage user-facing flows for malicious activity
• Deliver reports on completed tests and document technical issues identified during the assessments
• Collaborate with Product, Engineering and broader security teams to provide recommendations for solutions focused on decreasing business risks
• Support the Bug Bounty/VDP program through triaging submissions and proposing remediations

Preferred Qualifications

Passion for cyber security demonstrated through participation/leadership in webinars, Capture the Flag (CTF), TryHackMe, Hack The Box, Bug Bounty Programs, submission of CVEs and/or personal security projects

Benefits

Box offers healthcare benefits, additional Box Benefits + Perks, equity, and opportunities for professional development