Senior Software Engineer, Trust and Safety Engineering
Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. We help companies thrive in the new AI-first era of business. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide.
About the role
Software Engineers on the Trust and Safety Engineering team play a critical role in protecting Box, its platform, and its customers from abuse, fraud, and malicious actors. This role is ideal for an engineer who combines strong software development fundamentals with a deep interest in security, threat mitigation, and building resilient systems at scale. The team partners closely with security, product, and engineering organizations across Box to design and deliver solutions that strengthen the company’s defenses while preserving a seamless customer experience.
Much of this work is highly visible and directly customer-facing, shaping how users experience safety, reliability, and trust across the product. The systems built by this team have significant impact, and performance is essential because latency matters in delivering protections that are both effective and seamless. Work in this area spans a wide range of disciplines, including building and operating containerized microservices in a Kubernetes-based environment, developing behavioral detection systems and machine learning models to identify suspicious activity, tuning rate limiters and other mitigation controls across the Box stack, and delivering product security features that proactively reduce risk.
Responsibilities
- Design, build, and continuously improve security systems that protect Box, its platform, and its customers from abuse, fraud, malicious actors, and insider threats.
- Develop scalable APIs and backend services that detect, prevent, and disrupt abuse campaigns across Box’s microservice infrastructure.
- Build behavioral detection systems and near-real-time mitigation workflows to identify suspicious usage patterns, risky traffic, and emerging attack techniques.
- Apply analytics and machine learning approaches to model malicious behavior, improve detection accuracy, and reduce false positives.
- Strengthen platform defenses through rate limiting, automated enforcement, and other mitigation controls that balance security with customer experience.
- Build resilient, containerized microservices in distributed environments that support high-volume trust and safety protections at scale.
- Partner closely with security, product, and engineering teams to translate threat trends into durable product and platform safeguards.
- Contribute to Box’s broader technical security strategy by identifying systemic risks, proposing defenses, and improving security engineering practices.
- Proactively evaluate evolving abuse and fraud patterns to help Box stay ahead of new threats with intelligent, scalable protections.
Requirements
- 6+ years of professional software development experience in one or more of the following languages: Java, Python, PHP, or Scala.
- Experience building containerized microservices in large-scale, distributed environments.
- Preferred qualifications include experience with machine learning models, large-scale datasets, Java Spring/Spring Boot, Terraform-based public cloud infrastructure, and trust and safety, abuse, or fraud mitigation systems.
- Strong interpersonal, communication, and reporting skills.
- Strong analytical, system design, engineering, planning, and problem-solving skills.
- Bachelor’s degree in Computer Science or equivalent practical experience.
Box lives its values, with community and in-person collaboration being a core part of our culture. Boxers are expected to work from their assigned office a minimum of 3 days per week.
Pay
United States Pay Range: $211,000 USD - $255,000 USD. This role is also eligible for equity and benefits.