Staff Security and Compliance Engineer, Federal - Moveworks

Staff Security and Compliance Engineer, Federal - Moveworks Explicitly requires vibe-coding experience (Claude Code) and leverages AI/scripting to automate security and compliance tasks. About the Role Lead automation for FedRAMP continuous monitoring and compliance at the intersection of cloud security and DevOps. Build cloud-native solutions and embed automated compliance checks into CI/CD pipelines using AWS, Terraform, Python, and AI-assisted scripting to reduce manual effort in federal security programs. Job Description Role Staff Security and Compliance Engineer (Federal) responsible for designing, building, and maintaining automation to support FedRAMP Continuous Monitoring (ConMon) and federal compliance reporting. The role focuses on cloud-based solutions, embedding compliance into CI/CD, and leveraging AI and scripting to automate recurring security tasks. Key Responsibilities Build and maintain automation for FedRAMP Continuous Monitoring (ConMon) and reporting. Develop cloud-based solutions to collect and track Key Security Indicators (KSIs) across tools such as Tenable, Wiz, and AWS Security Hub. Use AWS, Terraform, and Python to implement automation and infrastructure-as-code. Work with DevOps and engineering teams to embed compliance checks into CI/CD pipelines, automating pre-deployment controls. Leverage AI and scripting to reduce manual effort for user access reviews, audit preparation, evidence collection, and ConMon reporting. Contribute to data-driven compliance innovations (automated POAM/OSCAL/eMASS generation and KSI feeds). Participate in FedRAMP working groups and community initiatives. Requirements U.S. Citizenship and Secret Clearance (or eligibility to obtain). 5+ years of experience in software development or scripting with a focus on automating Governance, Risk Management, and Compliance (GRC). Proficiency with Python, AWS services, Kubernetes (EKS), Linux, and Terraform. Experience with Tenable, Wiz, and AWS Security Hub integrations. Experience with vibe-coding using Claude Code. Familiarity with federal compliance programs; FedRAMP experience preferred. Bachelor’s degree in Computer Science or related field, or equivalent experience/certifications. Strong collaboration skills and ability to operate in a fast-paced, growth-focused environment. Notes Role requires U.S. citizenship due to federal compliance and clearance requirements. The company supports flexible work personas (flexible, remote, or required in office) depending on the role and location. Skills Automation Governance Risk and Compliance (GRC) Cloud Security DevOps Collaboration CI/CD Integration Scripting Security Monitoring Audit Preparation Data-driven Compliance Collaboration Communication Employment Type Full-time Flexible work arrangements Remote work options (role-dependent work personas) Equal opportunity employer Candidate accommodations for application process #J-18808-Ljbffr Debtt Group