Cloud Security Tooling Engineer II

Box; Warszawa; Hybrid; PLN 180,000 - 300,000; Full time

Benefits offered by this job

Hybrid work environment

Office in Warsaw

Job summary

Box is seeking a Security Tooling Engineer II in Warsaw to build and run security tooling across our multi-cloud stack. You will implement configuration checks, manage IaC, and collaborate with Legal, Privacy, and Compliance to meet FedRAMP, SOC 2, PCI, and HIPAA standards.

You will contribute to Terraform/Terragrunt modules, write detection rules, maintain on-call rotations, and help automate misconfigurations.

Qualifications

• BA/BS in Computer Science or related field.
• 2+ years of experience with cloud-native security tooling and infrastructure-as-code in a cloud environment.
• Knowledge of configuration-as-code practices, and experience with policy engines (OVAL, Rego).
• Experience with REST APIs and at least one major language (Python, Java, Go, Node.js).
• Familiar with CI/CD, version control, and automated tests.
• Interest in DLP policy authoring and compliance frameworks (FedRAMP, SOC 2, PCI, HIPAA).
• Strong English communication; collaborative and growth-minded.

Responsibilities

• Deploy and maintain cloud-native security tooling across multi-cloud environments.
• Develop and manage infrastructure- and configuration-as-code changes with Terraform/Terragrunt.
• Implement security configuration checks using OVAL and Rego.
• Patch and upgrade tooling, maintain alerting and monitoring.
• Create detection rules and run ad-hoc scans for RTB requests.
• Collaborate with Legal, Privacy, and Compliance to align tooling with regulatory needs.
• Produce audit-ready reports and evidence artifacts.
• Participate in on-call rotations and cross-team collaboration.

Skills

cloud-native security tooling

infrastructure-as-code

configuration-as-code

OVAL

REGO

CI/CD

REST APIs

Python

Java

Go

Node.js

DLP policy authoring

FedRAMP SOC 2 PCI HIPAA

English communication

Education

BA/BS in Computer Science or related field

Tools

Terraform

Terragrunt

Job description

Box is seeking a Security Tooling Engineer II in Warsaw to build and run security tooling across our multi-cloud stack. You will implement configuration checks, manage IaC, and collaborate with Legal, Privacy, and Compliance to meet FedRAMP, SOC 2, PCI, and HIPAA standards.

You will contribute to Terraform/Terragrunt modules, write detection rules, maintain on-call rotations, and help automate misconfigurations.