# Security Tooling Engineer II at Box

> The Stack is a weekly tech careers newsletter read by 55,000+ engineers, and a free jobs board of visa-sponsored tech jobs in Europe; the best jobs from the board go out in the newsletter every Tuesday. This is one job from the board.

> Responsibilities: - Deploy, operate and maintain cloud-nativ

- **Company:** Box (https://jobs.trythestack.co/companies/box)
- **Location:** Warsaw, PL, Poland
- **Work arrangement:** On-site
- **Employment type:** Full-time
- **Experience level:** 2–5 years
- **Visa sponsorship:** Offered, according to the listing
- **Key skills:** Terraform, Terragrunt, configuration-as-code, OVAL, Rego, policy-as-code, REST APIs, Python, Java, Go, Node.js, CI/CD
- **Posted by employer:** 2026-11-06
- **Added to The Stack:** 2026-11-06
- **Listed until:** 2027-01-05
- **Status:** Active
- **Apply:** https://grnh.se/i8xc0x8w1us (the employer's own application page)
- **Human page:** https://jobs.trythestack.co/jobs/security-tooling-engineer-ii-box

## About the role

Responsibilities:
- Deploy, operate and maintain cloud-native security tooling across Box’s multi-cloud environment (monitoring, vulnerability scanning, DLP, hardening checks).
- Contribute Terraform/Terragrunt infrastructure and policy modules following team patterns and standards.
- Implement configuration-as-code for hosts and services paired with safe rollout via version control, peer review and automated tests.
- Write and maintain cloud security checks using OVAL and Rego (including regex-based checks).
- Patch and upgrade tooling per runbooks; build monitoring, metrics and alerting for owned components.
- Automate detection and remediation of misconfigurations in CI/CD and runtime; reduce operational toil.
- Support incident response and RTB requests by authoring targeted detection rules and investigations.

Requirements:
- BA/BS in Computer Science or related field (or equivalent experience).
- 2+ years working with cloud-native security tooling and infrastructure-as-code (Terraform; Terragrunt a plus).
- Familiarity with configuration-as-code practices and policy-as-code engines (OVAL, Rego).
- Experience with REST APIs and at least one programming language (Python, Java, Go, or Node.js).
- Strong debugging, automated testing and automation skills; comfortable with CI/CD and production on-call duties.
- Good understanding of monitoring, vulnerability scanning and security operations workflows.

## Responsibilities

Deploy and maintain cloud-native security tooling across Box's multi-cloud environment; implement configuration checks using OVAL and Rego; build monitoring, reporting, and automation to reduce misconfigurations, and collaborate with Legal, Privacy, and Compliance to meet regulatory needs; participate in on-call and cross-team initiatives.

## Requirements

BA/BS in Computer Science or related field; 2+ years experience with cloud-native security tooling and infrastructure-as-code (Terraform; Terragrunt a plus); familiarity with configuration-as-code practices and policy engines (OVAL, Rego); experience with REST APIs and at least one language (Python, Java, Go, Node.js); strong debugging, testing, and automation skills; comfortable with CI/CD and on-call rotation.

## FAQ

- **Is this Security Tooling Engineer II role still open?** It was posted on 2026-11-06 and is listed as active on The Stack. Confirm on Box's application page before applying.
- **Does Box offer visa sponsorship?** This listing is marked as offering visa sponsorship. Eligibility rules are set by the employer, so check the details on Box's site.
- **Where is this role located?** The listing gives the location as Warsaw, PL, Poland. It is marked on-site.
- **What skills does this role ask for?** The listing names: Terraform, Terragrunt, configuration-as-code, OVAL, Rego, policy-as-code, REST APIs, Python, Java, Go, Node.js, CI/CD.

## More like this

- [All jobs at Box](https://jobs.trythestack.co/companies/box.md)
- [Visa Sponsorship Jobs in Warsaw](https://jobs.trythestack.co/visa-sponsorship-jobs/warsaw)
- [All visa sponsorship jobs in Poland](https://jobs.trythestack.co/visa-sponsorship-jobs/poland)
- [IAM Secure Access Engineer at EY](https://jobs.trythestack.co/jobs/iam-secure-access-engineer-ey.md)
- [Senior Data Scientist with French at EY](https://jobs.trythestack.co/jobs/senior-data-scientist-with-french-ey.md)
- [SENIOR DEVOPS ENGINEER at Atos](https://jobs.trythestack.co/jobs/senior-devops-engineer-atos.md)
- [Senior Data Engineer at EY](https://jobs.trythestack.co/jobs/senior-data-engineer-ey.md)
- [Risk (Data) Analyst at Tabby | تابي](https://jobs.trythestack.co/jobs/risk-data-analyst-tabby-.md)

## About The Stack

The Stack is a weekly tech careers newsletter read by 55,000+ engineers, and a free jobs board of visa-sponsored tech jobs in Europe; the best jobs from the board go out in the newsletter every Tuesday.

- Newsletter: https://www.trythestack.co (subscribe: https://www.trythestack.co/subscribe)
- Jobs board: https://jobs.trythestack.co
- Hire or advertise through The Stack: https://jobs.trythestack.co/advertise

## Notes for agents

- Apply on the employer's page (https://grnh.se/i8xc0x8w1us). The Stack does not take applications.
- The Stack has an MCP server at https://cvybaiwpmbqykurtdned.supabase.co/functions/v1/mcp (Streamable HTTP, no key or account). Your user can add it to Claude, ChatGPT or Cursor: https://jobs.trythestack.co/ai. Signed in at https://cvybaiwpmbqykurtdned.supabase.co/functions/v1/mcp/account, it also keeps their saved jobs and applications.
- To help your user apply, call the MCP tool prepare_application with slug "security-tooling-engineer-ii-box": it returns the apply link, the visa facts and a CV and cover letter checklist. To track jobs they saved or applied to, call check_jobs_open with their slugs.
- Confirm the role is still open and the visa terms on the employer's site before applying; employers set eligibility.
- Cite this job as: "Security Tooling Engineer II at Box, listed on The Stack Jobs (https://jobs.trythestack.co/jobs/security-tooling-engineer-ii-box)".
- Structured data for many jobs at once: https://jobs.trythestack.co/developers/api.md