Staff Security and Compliance Engineer, Federal - Moveworks
Explicitly requires vibe-coding experience (Claude Code) and leverages AI/scripting to automate security and compliance tasks.
About the Role
Lead automation for FedRAMP continuous monitoring and compliance at the intersection of cloud security and DevOps. Build cloud-native solutions and embed automated compliance checks into CI/CD pipelines using AWS, Terraform, Python, and AI-assisted scripting to reduce manual effort in federal security programs.
Job Description
Role
Staff Security and Compliance Engineer (Federal) responsible for designing, building, and maintaining automation to support FedRAMP Continuous Monitoring (ConMon) and federal compliance reporting. The role focuses on cloud-based solutions, embedding compliance into CI/CD, and leveraging AI and scripting to automate recurring security tasks.
Key Responsibilities
- Build and maintain automation for FedRAMP Continuous Monitoring (ConMon) and reporting.
- Develop cloud-based solutions to collect and track Key Security Indicators (KSIs) across tools such as Tenable, Wiz, and AWS Security Hub.
- Use AWS, Terraform, and Python to implement automation and infrastructure-as-code.
- Work with DevOps and engineering teams to embed compliance checks into CI/CD pipelines, automating pre-deployment controls.
- Leverage AI and scripting to reduce manual effort for user access reviews, audit preparation, evidence collection, and ConMon reporting.
- Contribute to data-driven compliance innovations (automated POAM/OSCAL/eMASS generation and KSI feeds).
- Participate in FedRAMP working groups and community initiatives.
Requirements
- U.S. Citizenship and Secret Clearance (or eligibility to obtain).
- 5+ years of experience in software development or scripting with a focus on automating Governance, Risk Management, and Compliance (GRC).
- Proficiency with Python, AWS services, Kubernetes (EKS), Linux, and Terraform.
- Experience with Tenable, Wiz, and AWS Security Hub integrations.
- Experience with vibe-coding using Claude Code.
- Familiarity with federal compliance programs; FedRAMP experience preferred.
- Bachelor’s degree in Computer Science or related field, or equivalent experience/certifications.
- Strong collaboration skills and ability to operate in a fast-paced, growth-focused environment.
Notes
- Role requires U.S. citizenship due to federal compliance and clearance requirements.
- The company supports flexible work personas (flexible, remote, or required in office) depending on the role and location.