Senior Staff Security Engineer, AI Security

WHAT IS BOX? 

Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. We help companies thrive in the new AI-first era of business. Founded in 2005, Box simplifies work for leading global organizations, including AstraZeneca, JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia.

By joining Box, you will have the unique opportunity to continue driving our platform forward. Content powers how we work. It’s the billions of files and information flowing across teams, departments, and key business processes every single day: contracts, invoices, employee records, financials, product specs, marketing assets, and more. Our mission is to bring intelligence to the world of content management and empower our customers to completely transform workflows across their organizations. With the combination of AI and enterprise content, the opportunity has never been greater to transform how the world works together and at Box you will be on the front lines of this massive shift.

 

WHY BOX NEEDS YOU 

At Box, we are at the forefront of securing next-generation AI technologies that transform how organizations manage and protect their content. We have the opportunity to shape industry standards for agentic AI security and make a lasting impact on the safety and trustworthiness of AI-powered products.

As a Sr. Staff Security Engineer specializing in Agentic AI Security, you will lead the design, architecture, and implementation of advanced security frameworks protecting Box’s autonomous AI agents and platforms. You will drive strategic initiatives to safeguard critical assets, including user and customer data, against emerging threats unique to agentic AI technologies. This role requires deep expertise in securing complex distributed systems, modern isolation techniques, network security, and cloud environments, combined with a strong understanding of AI/ML security challenges.

 

WHAT YOU'LL DO 

• Architect and lead development of robust security controls for agentic AI systems, including identity, network, and runtime defenses such as sandboxing and policy enforcement integrated with Box’s Agent Infrastructure stack.

• Build and oversee production-grade security tooling to harden safety monitoring pipelines across agent executions at scale.

• Lead adversarial testing and continuous assurance efforts, including red teaming and automated vulnerability discovery aligned with industry best practices for agentic AI security.

• Collaborate cross-functionally with engineering, product, research, safety, and security teams to balance security, performance, and usability in solutions.

• Influence and define long-term Agentic AI Security strategy and standards internally and externally, contributing thought leadership to the broader security community.

• Mentor and guide other engineers, fostering a culture of ownership, high-quality code, and proactive security posture.

 

WHO YOU ARE 

We are an AI-first company. This means you approach your work with a growth mindset and find ways to leverage AI to help make faster, smarter decisions that will 10X your impact at Box.

• 12+ years of experience in software or security engineering roles, with significant time spent architecting and operating secure, high-reliability services.

• Expertise in modern isolation techniques (container security, kernel-level hardening), network security (identity-based controls, policy enforcement), and cloud security (Azure, AWS, GCP).

• Strong programming skills in Python and/or systems languages such as Go, Rust, C/C++.

• Proven track record of shipping scalable security tooling and frameworks in production environments.

• Experience with AI/ML security risks and mitigation strategies is highly desirable.

• Excellent communication skills capable of bridging technical and leadership audiences and driving consensus.

• Demonstrated bias for action and ability to thrive in ambiguous, fast-paced environments.

Requirements

• Deep knowledge of agentic AI threat models and defense principles, including adversarial testing and hardened orchestration frameworks.

• Familiarity with supply chain security and automation tools relevant to AI and platform security.

• Leadership experience mentoring senior engineers and influencing company-wide security standards.