Senior Enterprise App Security Engineer

Socket.dev; United States; On-site; USD 114,000 - 121,000; Full time

Job summary

Box is seeking an Application Security Engineer to join our Enterprise Security team in the United States. You will design and maintain security controls across enterprise applications, infrastructure, and cloud services, collaborating with IT and business owners to securely deploy platforms, AI, and SaaS apps.

You will perform security assessments, build monitoring, and automate security controls for identity, secrets, and privileged access while supporting vulnerability management and incident

Qualifications

• BS/MS in Computer Science, Information Security, or related field, or equivalent practical experience.
• 3+ years of experience in enterprise security, application security, cloud security, or security engineering.
• Strong understanding of authentication, authorization, IAM, OAuth/OIDC/SAML, API security, secrets management, and secure application integrations.
• Hands-on experience securing enterprise application integrations across SaaS platforms (e.g., Salesforce, Workday).
• Experience with security technologies including EDR, DLP, email security, WAFs, vulnerability management, SIEM (Splunk, Elastic, Sentinel) and cloud security services across AWS, GCP, Azure.
• Scripting or automation experience (Python, PowerShell, Go) and familiarity with REST APIs and IaC.
• Strong communication and collaboration skills.
• Familiarity with AI tools and services.

Responsibilities

• Design, implement, and maintain security controls for enterprise applications, infrastructure, and cloud services.
• Collaborate with IT, Enterprise Engineering, and application owners to securely deploy and operate platforms, AI, and SaaS apps.
• Perform security assessments and architecture reviews for new applications and third-party vendors with risk-based mitigations.
• Build and maintain security monitoring, dashboards, and automation to improve visibility into enterprise risk, identity, and access.
• Develop and automate security controls for identity, secrets management, privileged access, and integrations.
• Support vulnerability management, incident response, and remediation efforts by identifying gaps and driving risk reduction across the environment.

Skills

Enterprise security

Application security

Cloud security

Security engineering

OAuth/OIDC/SAML

IAM

API security

Secrets management

SaaS integrations

Education

Bachelor's or Master's in Computer Science or Information Security

Tools

EDR

DLP

Email security

WAFs

Vulnerability management

SIEM (Splunk, Elastic, Sentinel)

Cloud security (AWS, GCP, Azure)

Job description

Box is seeking an Application Security Engineer to join our Enterprise Security team in the United States. You will design and maintain security controls across enterprise applications, infrastructure, and cloud services, collaborating with IT and business owners to securely deploy platforms, AI, and SaaS apps.

You will perform security assessments, build monitoring, and automate security controls for identity, secrets, and privileged access while supporting vulnerability management and incident