Security Engineer

About the Role

Moveworks is seeking a Security Engineer to secure its AI infrastructure, platform, and features. You will design, implement, and operate security controls to scale with engineering teams and safely deploy LLMs in the enterprise. You will collaborate across ML, product, and infrastructure teams to build secure solutions. What You'll Do

• Lead Security Reviews: Engage proactively in design discussions and data handling reviews to ensure security is integrated at every stage.

• Execute Penetration Testing: Carry out targeted penetration tests as part of security reviews for features deemed critical. Identify vulnerabilities and recommend risk mitigation strategies.

• Develop and Maintain AppSec Processes and Tools: Ensure AppSec processes and CI/CD scanning tools are up-to-date and effective in identifying and mitigating vulnerabilities.

• Contribute to AppSec Program Enhancements: Play a key role in the continuous improvement of Moveworks' AppSec program, focusing on effective security outcomes.

• Collaborate with Cross-Functional Teams: Partner with ML, search, product, infrastructure, data, and frontend teams to design secure solutions.

• Empower Teams on Security Matters: Enable teams to make informed security-related decisions. What We're Looking For

• 5+ years of experience in Application Security identifying security risks, developing mitigation plans, and implementing security features and solutions.

• 3+ years of experience in Penetration testing.

• 2+ years of experience with SAST, DAST, dependency scanning and vulnerability management tools like Snyk, GitHub Dependabot, Burp Suite.

• 2+ years of experience with modern high-level programming languages such as Python or Golang.

• Cloud infrastructure: Hands-on experience with cloud-native security best practices across AWS, GCP, and/or Azure.

• Technical knowledge in application security, network security, authentication, authorization, identity systems, encryption, AI/LLM security and secure coding practices.

• Educational background: BS+ in computer science or a related field, or equivalent relevant experience.