Application Security Engineer

Are you interested in being the first dedicated Application Security Engineer at Moveworks? Do you like to work hand-in-hand with engineers to develop secure solutions from the get-go and ensure they stay protected for years to come? Do you want to work to keep a cloud-only environment secure at scale? If the answers are yes, we have the perfect opportunity for you.

As an Application Security Engineer, you’ll own the end-to-end security design of Moveworks' AI infrastructure, platform, and features. Reporting directly to the Chief Information Security Officer, you’ll be responsible for designing and implementing security solutions and practices that allow our engineering teams to build secure infrastructure and features at scale.

We’re building a team that indexes on moving fast without sacrificing security. Every day, you’ll work to solve challenging product and engineering problems and securely provide value to our customers. To be successful, you'll partner with machine learning, search, product, infrastructure, data, and full-stack teams to identify, define and build elegant security solutions. You’ll drive threat models and design and lead security code reviews while putting the right tooling in place as part of our CI/CD pipeline. This is an opportunity to play an integral role at the fastest-growing AI startup in its space. 

What you'll do:

• Be responsible for the entire Application Security (AppSec) program at Moveworks
• Develop and maintain our AppSec process and tools
• Partner with machine learning, search, product, infrastructure, data, and frontend teams to design secure solutions
• Empower teams to make the right calls for security-related matters
• Participate in design discussions and data handling reviews
• Perform risk assessments and exceptions
• Analyze and provide observability into the security of infrastructure, platform, and features by building tools and tests
• Define key security metrics and measure the effectiveness of the AppSec program

What you bring to the table:

• 5+ years of experience in Application Security
• Ability to evaluate, design, implement, and support security-focused distributed services and platforms
• Experience building long-lasting relationships with teams 
• Ability to identify security risks, develop mitigation plans, and implement security features and solutions
• Expert knowledge of network security, application security, authentication, authorization, identity systems, encryption, and secure coding practices
• Experience with cloud infrastructure like AWS, GCP, and/or Azure
• A high level of curiosity about engineering outside of your immediate discipline and an incessant desire to learn
• Experience operating in environments with compliance requirements (SOC2, HIPAA, ISO27001, FedRAMP, etc.)
• BS+ in computer science or a related field, or equivalent relevant experience

Who we are:

Moveworks is revolutionizing how companies support their employees — with the first AI platform that makes getting help at work effortless. Using advanced conversational AI built for the enterprise, Moveworks gives employees exactly what they need, from IT support to HR help to policy information. Our platform allows customers like DocuSign, Broadcom, and Western Digital to move forward on what matters.

Founded in 2016, Moveworks has raised $315 million in funding, at a valuation of $2.1 billion. We've been named to the Forbes AI 50 list for three consecutive years, while earning recognition as the Best Chatbot Solution at the 2021 AI Breakthrough Awards. Above all, we've built an AI company that puts people first, which is why both Inc. and the San Francisco Business Times called Moveworks one of the Best Workplaces of 2021. 

This job offers a unique chance to join the team at an early stage as a key player in our growth strategy. If that sounds like fun, join one of the fastest-growing teams on the planet!

#moveworkssecurityjobs