Senior Security and Compliance Engineer, Federal - Moveworks

ServiceNow • Mountain View, CA

10h

About The Position

Moveworks is seeking a Senior Security and Compliance Engineer, Federal to join their team. This role involves building and maintaining automation for FedRAMP Continuous Monitoring (ConMon) and reporting. The engineer will develop cloud-based solutions using AWS, Terraform, and Python to collect and track Key Security Indicators (KSIs) across various security tools. They will also work with DevOps and Engineering to integrate compliance into the CI/CD pipeline, leveraging AI and scripting to reduce manual effort in recurring security tasks. The position will contribute to data-driven compliance innovations, including automated POAM/OSCAL/eMass generation and KSI feeds, and participate in FedRAMP working groups and community initiatives. Moveworks, now acquired by ServiceNow, is at the forefront of the AI transformation, creating a single front door to work for all business systems.

Requirements

• U.S. Citizenship
• Secret Clearance (or eligibility to obtain)
• 5+ years of experience in software development or scripting, with a focus on automation of Governance, Risk Management and Compliance (GRC)
• Proficiency in Python, AWS services, Kubernetes (EKS), Linux, and Terraform
• Experience with vibe-coding with Claude Code
• Experience with one or more common compliance programs, Federal compliance program experience preferred
• A Bachelor’s degree in Computer Science or a related field — or equivalent experience/certifications

Responsibilities

• Build and maintain automation for FedRAMP Continuous Monitoring (ConMon) and reporting.
• Develop cloud-based solutions using AWS, Terraform, and Python to collect and track Key Security Indicators (KSIs) across tools like Tenable, Wiz, and AWS Security Hub.
• Work with DevOps and Engineering to embed compliance into the CI/CD pipeline, automating checks before deployment.
• Leverage AI and scripting to reduce manual effort in recurring security tasks such as user access reviews, audit preparation, evidence collection and ConMon reporting.
• Contribute to data-driven compliance innovations, including automated POAM/OSCAL/eMass generation and KSI feeds.
• Participate in FedRAMP working groups and community initiatives.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior