Security Tooling Engineer II at Box

✨ The Stack take on this Box job

• 🏢 Box has 2 jobs here, 2 with visa sponsorship see all
• 📊 4 Security Engineer jobs in Poland in the last 60 days see them
• 🛂 Visa: EU Blue Card. Minimum salary: PLN 160,264.08 a year (150% of the 2025 average salary) guide
• 💡 No salary shown. Ask Box if it is above the minimum.

Updated 2026-11-06, from our data and official sources.

Apply with your AI assistant

With The Stack connected to Claude, ChatGPT or Cursor, paste this. Your assistant tailors your CV and cover letter, checks the visa facts and gives you the apply link.

Help me apply to this job on The Stack: https://jobs.trythestack.co/jobs/security-tooling-engineer-ii-box

Not connected yet? Connect in a minute. To help your user apply, call the MCP tool prepare_application with slug "security-tooling-engineer-ii-box": it returns the apply link, the visa facts and a CV and cover letter checklist. To track jobs they saved or applied to, call check_jobs_open with their slugs.

About the role

Responsibilities:
- Deploy, operate and maintain cloud-native security tooling across Box’s multi-cloud environment (monitoring, vulnerability scanning, DLP, hardening checks).
- Contribute Terraform/Terragrunt infrastructure and policy modules following team patterns and standards.
- Implement configuration-as-code for hosts and services paired with safe rollout via version control, peer review and automated tests.
- Write and maintain cloud security checks using OVAL and Rego (including regex-based checks).
- Patch and upgrade tooling per runbooks; build monitoring, metrics and alerting for owned components.
- Automate detection and remediation of misconfigurations in CI/CD and runtime; reduce operational toil.
- Support incident response and RTB requests by authoring targeted detection rules and investigations.

Requirements:
- BA/BS in Computer Science or related field (or equivalent experience).
- 2+ years working with cloud-native security tooling and infrastructure-as-code (Terraform; Terragrunt a plus).
- Familiarity with configuration-as-code practices and policy-as-code engines (OVAL, Rego).
- Experience with REST APIs and at least one programming language (Python, Java, Go, or Node.js).
- Strong debugging, automated testing and automation skills; comfortable with CI/CD and production on-call duties.
- Good understanding of monitoring, vulnerability scanning and security operations workflows.

Responsibilities

Deploy and maintain cloud-native security tooling across Box's multi-cloud environment; implement configuration checks using OVAL and Rego; build monitoring, reporting, and automation to reduce misconfigurations, and collaborate with Legal, Privacy, and Compliance to meet regulatory needs; participate in on-call and cross-team initiatives.

Requirements

BA/BS in Computer Science or related field; 2+ years experience with cloud-native security tooling and infrastructure-as-code (Terraform; Terragrunt a plus); familiarity with configuration-as-code practices and policy engines (OVAL, Rego); experience with REST APIs and at least one language (Python, Java, Go, Node.js); strong debugging, testing, and automation skills; comfortable with CI/CD and on-call rotation.

Key skills

• Terraform — in 475 other listings on The Stack
• Terragrunt — in 8 other listings on The Stack
• configuration-as-code — not in any other listing on The Stack
• OVAL — not in any other listing on The Stack
• Rego — not in any other listing on The Stack
• policy-as-code — in 3 other listings on The Stack
• REST APIs — in 65 other listings on The Stack
• Python — in 1211 other listings on The Stack
• Java
• Go
• Node.js
• CI/CD

On The Stack (as of 2026-11-06)

• Box has 1 other listing on The Stack, 1 of them marked as offering visa sponsorship.
• 29 visa-sponsored jobs in Poland on The Stack, posted in the last 60 days.
• 48 visa-sponsored security engineer jobs in Europe on The Stack, posted in the last 60 days.

Frequently asked questions about Box

Is this Security Tooling Engineer II role still open?

It was posted on 2026-11-06 and is listed as active on The Stack. Confirm on Box's application page before applying.

Does Box offer visa sponsorship?

This listing is marked as offering visa sponsorship. Eligibility rules are set by the employer, so check the details on Box's site.

Where is this role located?

The listing gives the location as Warsaw, PL, Poland. It is marked on-site.

What skills does this role ask for?

The listing names: Terraform, Terragrunt, configuration-as-code, OVAL, Rego, policy-as-code, REST APIs, Python, Java, Go, Node.js, CI/CD.