ServiceNow
Staff Security Engineer, Security Operations - Moveworks
Mountain View, CALIFORNIA, United States · Staff · Full-time · Posted Jun 8, 2026
- Experience
- 8–10 years in Security Operations, Systems Engineering, or DevSecOps; minimum 5 years of highly relevant engineering experience. Also asks for 3–5 years working across multidisciplinary teams.
- Visa sponsorship
- U.S. citizenship required.
About the job
Designs and leads AI-agent-driven security operations, including threat hunting, incident response, and automated defense systems.
What you'll do
- Architect agent and MCP orchestration for threat hunting, triage, containment, and recovery.
- Build and scale proactive threat hunting and automated incident response, replacing traditional SOAR workflows.
- Lead incident escalations and validate defenses through automated simulation testing.
What they ask for
- U.S. citizenship.
- 8–10 years in Security Operations, Systems Engineering, or DevSecOps, including at least 5 years of highly relevant engineering experience.
- High proficiency in Python and software engineering; experience with workflow engines and legacy SOAR tooling.
- Hands-on architectural familiarity with AWS security (IAM, CloudTrail, GuardDuty) and containerized environments (Kubernetes/EKS).
Nice to have
- 3–5 years working across multidisciplinary teams; direct collaboration with Product Security or Data Security teams is a bonus.
Tools
Python, MCP, AWS, IAM, CloudTrail, GuardDuty, Kubernetes, EKS
AI focus
Build and orchestrate autonomous AI agents and MCP systems for proactive threat hunting, incident response, defense validation, and replacing traditional SOAR workflows.
Model-written summary · the original posting is authoritative