SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Moveworks (acquired by ServiceNow) is seeking a Senior Software Engineer, DevOps to lead vulnerability management and security automation across the Moveworks AI cloud infrastructure and developer platform. This role bridges DevOps and security, focusing on DevSecOps practices at scale.
You will be responsible for:
- Vulnerability management and security automation across multi-cloud infrastructure (AWS and Azure)
- Triaging and driving remediation of findings from SAST, dependency, and container vulnerability scans
- Implementing and tuning policy-as-code guardrails for Kubernetes and infrastructure-as-code (IaC)
- Managing secrets, identity federation (IRSA on AWS, Managed Identity/Workload Identity on Azure), and least-privilege access patterns
- Building and managing CI/CD pipeline security controls including artifact signing, build provenance, and dependency pinning
- Supporting replatformization efforts to extend infrastructure and security controls to Azure and other hyperscaler environments, including AKS cluster security posture
- Collaborating with security teams on compliance automation, evidence collection, and audit readiness as ServiceNow controls are adopted
- Working closely with platform, ML, search, data, and frontend teams to understand their security and infrastructure needs
This is a hands-on technical role with significant ownership and autonomy. You'll work at startup pace on challenging infrastructure and security problems within a large enterprise context.
REQUIREMENTS:
- 3-5 years of experience in DevOps, Platform, or Security Engineering
- Experience leveraging or critically thinking about how to integrate AI into work processes, decision-making, or problem-solving
- Hands-on technical contributor with strong sense of ownership; able to work through vulnerability findings from triage to closure
- Working knowledge of AWS infrastructure (IAM roles, security groups, VPC, DNS)
- Working knowledge of or strong interest in Azure infrastructure and security services (Azure AD/Entra ID, Azure Key Vault, Network Security Groups, Azure Policy, Microsoft Defender for Cloud)
- Experience with vulnerability scanning and security tooling (SAST, container/image scanning, dependency scanning, SBOM generation) across AWS and/or Azure
- Experience with Kubernetes cluster fundamentals and workload security; exposure to both EKS and AKS is a plus
- Working knowledge of secrets management, encryption, certificate management, and related security practices across cloud providers
- Comfort with tools such as Terraform, Vault, OPA/Kyverno, Jenkins, ArgoCD/Flux, Helm
- Scripting proficiency in Python, Bash, or Go for automating repetitive security and operations tasks
- Appetite for working at startup pace on challenging problems with high degree of ownership
