About this role
About the Role Moveworks' Security team at ServiceNow is seeking a Security Automation Disruptor to automate the SOC out of existence. This role treats the incident response lifecycle as an engineering problem—designing, building, and deploying autonomous workflows that handle detection, triage, and remediation at machine speed. You’ll be at the intersection of core Security Operations and AI-driven defense. What You'll Do
- Design, build, and deploy autonomous security workflows that automate detection, triage, and remediation at machine speed.
- Own and optimize the end-to-end incident response lifecycle (E2E IR) through automation and AI-enabled tooling.
- Collaborate with the Blue Team to infuse AI-driven defense into SOC operations and reduce manual tasks.
- Continuously improve the security automation platform and playbooks to scale defense across the enterprise. What We're Looking For
- Not a traditional SOC analyst; comfortable moving beyond dashboards to automated, engineered defenses.
- Ability to treat the incident response lifecycle as an engineering problem and translate IR requirements into repeatable workflows.
- Experience or capability to design, build, and deploy autonomous workflows that handle detection, triage, and remediation at machine speed.
- Experience working at the intersection of Security Operations and AI-driven defense.
- Familiarity with End-to-End Incident Response (E2E IR) concepts.