9 hours ago
Warsaw, PolandMid Level
Responsibilities
- Deploy and maintain cloud-native security tooling in a multi-cloud environment.
- Manage infrastructure and policy changes using Terraform and Terragrunt.
- Implement configuration-as-code and infrastructure-as-code changes with version control, peer reviews, and automated tests.
- Develop cloud security configuration checks using OVAL, Rego, and regex patterns.
- Patch and upgrade tooling deployments while maintaining security, availability, and reliability.
- Build monitoring, metrics, and alerting for owned components.
- Automate detection and remediation of misconfigurations in CI/CD and runtime environments.
- Write targeted detection rules and perform ad-hoc scans for RTB requests.
- Collaborate with Legal, Privacy, Compliance, and security teams on regulatory requirements.
- Produce reports and evidence artifacts for auditors and internal stakeholders.
- Document standards and playbooks and share knowledge with peers.
- Participate in on-call rotation and triage operational issues.
- Represent Box Poland internally and externally and contribute to the Warsaw office culture.
Requirements
- BA/BS in Computer Science or a related field.
- At least 2 years of experience with cloud-native security tooling and infrastructure-as-code in a cloud environment.
- Experience or working knowledge of configuration-as-code and policy-as-code practices.
- Familiarity with OVAL and Rego for configuration compliance checks.
- Knowledge of version control, CI/CD, reviews, and unit or integration testing.
- Familiarity with REST APIs and at least one of Python, Java, Go, or Node.js.
- Ability to debug across multiple system layers and write modular, testable, maintainable code with guidance.
- Awareness of FedRAMP, SOC 2, PCI, and HIPAA compliance frameworks.
- Interest in DLP policy authoring using JSON/YAML, RE2 regex, dictionaries, and context rules.
- Preferred experience with classification, tagging, policy enforcement, and preventing sensitive data exfiltration.
- Strong English communication skills and the ability to collaborate with distributed teams.
- Ability to support on-call responsibilities and occasional shifted hours.
Benefits
- Hybrid work arrangement with a minimum of three days per week in the assigned office.
- General perks and benefits are described in Box’s Life at Box overview.
- The role includes participation in an on-call rotation and occasional shifted hours for cross-time-zone projects.
About Box
Box builds a cloud content management platform for enterprises, combining secure file storage and sharing with collaboration, governance, e-signature, and workflow automation. It sells subscriptions (SaaS) to organizations that need to manage the lifecycle of business content and integrate with productivity apps. Founded in 2005 and headquartered in Redwood City, CA, Box is a public company (NYSE: BOX) used by customers such as JLL, Morgan Stanley, and Nationwide.