Responsibilities
- Initiate and guide security assessments during system design and data flow planning to embed security early in development.
- Perform focused penetration testing on high-risk features, detect vulnerabilities, and propose actionable remediation approaches.
- Improve and sustain application security testing methods and tools to consistently identify and resolve security flaws.
- Support the evolution of the application security program by contributing to policies, standards, and security outcomes.
- Work closely with machine learning, search, product, infrastructure, data, and frontend engineering teams to implement secure architectures.
- Educate and equip development teams to make sound security decisions through guidance and shared ownership.
Responsibilities
- Lead Security Reviews: Engage proactively in design discussions and data handling reviews to ensure security is integrated at every stage.
- Execute Penetration Testing: Carry out targeted penetration tests as part of security reviews for features deemed critical. Identify vulnerabilities and recommend strategies for risk mitigation. Develop and refine testing methodologies to effectively uncover and address security risks.
- Develop and Maintain AppSec Processes and Tools: Ensure our AppSec processes and CI/CD scanning tools are up-to-date and effective in identifying and mitigating vulnerabilities.
- Contribute to Application Security (AppSec) Program Enhancements: Play a key role in the continuous improvement of the Application Security program at Moveworks, focusing on effective security outcomes.
- Collaborate with Cross-Functional Teams: Partner with machine learning, search, product, infrastructure, data, and frontend teams to design secure solutions.
- Empower Teams on Security Matters: Enable teams to make informed security-related decisions.
