Senior Security Engineer
Redwood City, Ca, Us
•Responsible for identifying and assessing risks across Box Infrastructure as the Security Architect.•Partnered with engineering architects and designed security controls for using Public Cloud providers (AWS, GCP, Azure and IBMCloud) to extend Box Infrastructure. This led to the successful migration of microservices to run on various cloud platforms.•Operationalized the Vendor Management process at Box, by risk-ranking vendors to generate metrics that helped scale the process. Defined and implemented a “Risk- exception” process to track vendors where risks need to be mitigated.•Designed the security requirements for a standardized CI/CD pipeline, to enable engineers across different teams (Desktop, mobile etc.,) deploy code efficiently. •Implemented a “catch-all” process for all security reviews which increased engineering and product teams’ engagement with Security, Legal and Compliance leading to early and timely identification of risks. •Successfully enabled the global Box workforce by creating the Mandatory Security Awareness training for all employees. This improved workforce security awareness about current and active threats and defenses for the same. •Regularly presented security training at orientation for new employees. This helped new hires from diverse functions familiarize and engage with the Security team from the beginning.