Security Tooling Engineer II

📋 Description

• Deploy and help maintain cloud-native security tooling in our multi-cloud environment.
• Contribute to infrastructure and policy management using Terraform and Terragrunt, following team
• Contribute configuration-as-code changes for host and service configuration, paired with the
• Implement cloud security configuration checks in tools that use OVAL and Rego, using regex patterns.
• Patch and upgrade tooling deployments on a regular cadence, following team runbooks, to maintain
• Build monitoring, metrics, and alerting for owned components to support risk reduction and

🎯 Requirements

• BA/BS in Computer Science or related field.
• 2+ years of experience with cloud-native security tooling and infrastructure-as-code (Terraform
• Working knowledge of configuration-as-code practices for host and service configuration, and
• Familiar with security policy engines (e.g., OVAL, Rego) for configuration compliance checks.
• Working knowledge of policy-as-code practices (version control, CI/CD, reviews, unit/integration
• Familiar with REST APIs and at least one major language (Python, Java, Go, or Node.js); solid

🎁 Benefits

• Check out the overview of Life at Box which include general perks and benefits.
• Box lives its values, with community and in-person collaboration being a core part of our culture.