Senior Red Team Security Engineer - Moveworks at ServiceNow

Do you think like an attacker when evaluating defenses? Are you motivated by emulating real world adversaries against mature environments? Join Moveworks’s Red Team as we continue to expand and sharpen our adversary simulation capabilities. Moveworks from ServiceNow is transforming how companies support their employees through AI. As a Senior Red Team Security Engineer, you will drive the next phase of our Red Team by executing high fidelity operations, modeling complex attack paths, and enhancing capabilities that reflect modern threat actors. You will work closely with the Blue Team to conduct Purple Team exercises and validate detection and response. You will evolve tradecraft in social engineering, malware development, and command-and-control, while driving operational consistency and scale through custom tooling and infrastructure. We’re looking for someone who leads through execution, brings strong technical instincts, and has a lasting impact on the team’s capabilities. You’ll take ownership of complex engagements, push into areas that require creativity and persistence, and consistently deliver high quality offensive work. You will also play a key role in raising the bar across the team by sharing knowledge, refining tradecraft, and helping others grow. What you get to do in this role: • Execute Red Team engagements by simulating advanced threat actors across a diverse attack surface, including enterprise endpoints, cloud infra, networks, and product/services. • Build, maintain, and scale custom tools and infrastructure to support and automate Red Team operations. • Develop sophisticated bypasses for security controls, such as Endpoint Detection and Response (EDR) and other monitoring solutions. • Lead social engineering initiatives, including the design and execution of phishing, vishing, and smishing campaigns to test initial access vulnerabilities. • Be a sparring partner with the SOC to test and improve detection and response capabilities. • Stay at the forefront of the industry by researching emerging threats and continuously evolving your offensive security skillset. • Design novel attack vectors and chain vulnerabilities creatively to achieve high-impact objectives. • Maintain an attacker’s mindset with the depth to dive into detailed analysis when needed. • Collaborate cross-functionally with Machine Learning, Search, Product, Infrastructure, Data, and Frontend teams to design and implement secure solutions. • Empower teams to make informed security-related decisions by documenting and presenting findings to both technical and executive audiences.