Senior Application Security Engineer - Moveworks

ServiceNow•Mountain View, CA

3d•Flexible or Remote

About The Position

Moveworks is seeking a Senior Application Security Engineer to join their team and focus on securing their AI infrastructure, platform, and features. This role involves collaborating closely with engineers to develop secure solutions from the ground up, ensuring their robustness over time, and mitigating risks on LLM and Agentic AI solutions at scale. The successful candidate will report directly to the Head of Application Security and will be responsible for designing, implementing, and executing security solutions and practices that enable engineering teams to build secure infrastructure and features at scale. The role involves working on cutting-edge solutions and safeguards for the safe deployment of Large Language Models (LLMs) in the enterprise. This is an opportunity to play an integral role at a fast-growing AI startup, backed by the global scale of ServiceNow.

Requirements

5+ years of experience in Application Security identifying security risks, developing mitigation plans, and implementing security features and solutions.
3+ years of experience in Penetration testing.
2+ years of experience with SAST, DAST, dependency scanning and vulnerability management tools like Snyk, GitHub Dependabot, Burp Suite.
2+ years of modern high-level programming language like Python, Golang or equivalent.
Hands-on experience with cloud-native security best practices across AWS, GCP, and/or Azure.
In-depth knowledge of application security, network security, authentication, authorization, identity systems, encryption, AI/LLM security and secure coding practices.
BS+ in computer science or a related field, or equivalent relevant experience.

Responsibilities

Lead Security Reviews: Engage proactively in design discussions and data handling reviews to ensure security is integrated at every stage.
Execute Penetration Testing: Carry out targeted penetration tests as part of security reviews for features deemed critical. Identify vulnerabilities and recommend strategies for risk mitigation. Develop and refine testing methodologies to effectively uncover and address security risks.
Develop and Maintain AppSec Processes and Tools: Ensure our AppSec processes and CI/CD scanning tools are up-to-date and effective in identifying and mitigating vulnerabilities.
Contribute to Application Security (AppSec) Program Enhancements: Play a key role in the continuous improvement of the Application Security program at Moveworks, focusing on effective security outcomes.
Collaborate with Cross-Functional Teams: Partner with machine learning, search, product, infrastructure, data, and frontend teams to design secure solutions.
Empower Teams on Security Matters: Enable teams to make informed security-related decisions.