Company Description Who we are Moveworks is the Agentic AI Assistant platform that empowers the entire workforce. Our platform enables employees to converse with all of their business systems through natural language to quickly find answers and automate tasks. Powered by the world's most advanced LLMs, our proprietary models, and a sophisticated Agentic AI platform, we're transforming how work gets done by allowing AI to take initiative, streamline complex workflows, and continuously learn and adapt. Moveworks is trusted by over 5.5 million employees at more than 350 of the world’s largest companies, including 10% of the Fortune 500, to automate everyday tasks and streamline business operations. Recognized on the Forbes Cloud 100 and AI 50 lists, Moveworks was also named one of Fast Company’s 2025 Most Innovative Companies and Inc’s Best in Business, in the Best in Innovation category. Moveworks was also recognized at Microsoft’s 2025 Partner of the Year and in 2024, received the AI Breakthrough Award. In December 2025, Moveworks was acquired by ServiceNow, marking a pivotal milestone in our journey to create a single front door to work for all business systems. By combining ServiceNow’s leading workflow automation with Moveworks’ Reasoning Engine and natural language capabilities, we deliver the AI platform for every person and every workflow. Built to go beyond basic summaries to deliver meaningful business impact. Together, our AI acts across enterprise systems to turn conversations into completed work. By joining our team, you’ll be at the forefront of the AI transformation, backed by the global scale of ServiceNow and the agility of a high-growth company. We are looking for world-class talent to help us extend agentic AI to every employee across every corner of the business. Come join us! ServiceNow It all started in sunny San Diego, California in 2004 when a visionary engineer, Fred Luddy, saw the potential to transform how we work. Fast forward to today — ServiceNow stands as a global market leader, bringing innovative AI-enhanced technology to over 8,100 customers, including 85% of the Fortune 500®. Our intelligent cloud-based platform seamlessly connects people, systems, and processes to empower organizations to find smarter, faster, and better ways to work. But this is just the beginning of our journey. Join us as we pursue our purpose to make the world work better for everyone. Job Description What you get to do in this role: - Build and maintain automation for FedRAMP Continuous Monitoring (ConMon) and reporting. - Develop cloud-based solutions using AWS, Terraform, and Python to collect and track Key Security Indicators (KSIs) across tools like Tenable, Wiz, and AWS Security Hub. - Work with DevOps and Engineering to embed compliance into the CI/CD pipeline, automating checks before deployment. - Leverage AI and scripting to reduce manual effort in recurring security tasks such as user access reviews, audit preparation, evidence collection and ConMon reporting - Contribute to data-driven compliance innovations, including automated POAM/OSCAL/eMass generation and KSI feeds. - Participate in FedRAMP working groups and community initiatives. Qualifications To be successful in this role you have: - U.S. Citizenship - Secret Clearance (or eligibility to obtain) - 5+ years of experience in software development or scripting, with a focus on automation of Governance, Risk Management and Compliance (GRC) - Proficiency in Python, AWS services, Kubernetes (EKS), Linux, and Terraform - Experience with vibe-coding with Claude Code - Experience with one or more common compliance programs, Federal compliance program experience preferred - A Bachelor’s degree in Computer Science or a related field — or equivalent experience/certifications - A collaborative mindset with the ability to thrive in a fast-paced, growth-focused environment Additional Information Work Personas We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service. Equal Opportunity Employer ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements. Accommodations We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact [email protected] for assistance. Export Control Regulations For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities. From Fortune. ©2025 Fortune Media IP Limited. All rights reserved. Used under license. - Employee Type: Regular - Region: AMS - North America and Canada - Work Persona: Flexible or Remote

• Seguridad en Infraestructura (AWS) • Diseñar e implementar controles de seguridad en AWS (IAM, red, cómputo) • Asegurar principios de mínimo privilegio, segmentación y defensa en profundidad • Infraestructura como Código (IaC) • Desarrollar y revisar Terraform/Terragrunt con enfoque en security baselines • Realizar code reviews de IaC desde seguridad • Diseñar y mantener políticas IAM • Asegurar servicios como Lambda, ECS, EKS, Fargate, EC2, API gateways, Balancers, WAF, RDS, Elasticache, etc • Definir e implementar arquitecturas seguras en VPC (Security Groups, NACLs, segmentación, vpce) • Gestionar KMS, ACM y secrets management • Garantizar cifrado en tránsito y en reposo, con automatizaciones • Diseñar e integrar en pipelines (GitHub Actions) steps de seguridad • Definir controles de seguridad para despliegues en plataformas Mobile • Automatizar procesos de: ABM de accesos en distintas herramientas de la compañía, despliegues seguros, validaciones de seguridad • Mantener y optimizar: GuardDuty, Security Hub, Inspector, CloudTrail • Definir alertas y monitoreo en CloudWatch • Mejorar la postura de seguridad de forma continua

Role Description Juicyway exists to fix the financial infrastructure that connects African businesses to the world. The Security and Infrastructure team protects Juicyway's technology, people, and products, prioritizing impact and building a security culture. - Lead the function of InfraSec to actively harden Juicyway's infrastructure. - Design and build security controls across every layer of the stack: - Physical hardware - Operating systems - Kubernetes - Networks - CI/CD pipelines - Hardening multi-cloud infrastructure end to end, including: - Network isolation - Secret management - Machine identity - Checkpoint encryption - Protect API services against common and emerging threats. - Secure and monitor the distributed workforce device fleet. - Partner with engineering teams to deploy security enhancements at scale. - Lead compliance work including PCI DSS and SOC 1 and 2. - Take a generalist approach to emerging workloads. - Build the security culture across the engineering organization. Qualifications - Deep expertise in cloud security — AWS and/or Azure. - Proven experience securing Kubernetes environments. - Solid track record with secret management, IAM, and access control at scale. - Hands-on experience with compliance frameworks; PCI DSS and SOC 1 and 2. - Strong analytical instincts. - Effective communication skills across technical and non-technical stakeholders. - Bonus: experience securing cryptocurrency systems; background in financial services; familiarity with endpoint protection tooling. Benefits - Competitive pay. - Meaningful equity at an early stage. - Real flexibility on hours, location, and work style. - A technical team that values security and listens to your input. Company Description Juicyway was started by Ife and Justin, processing their first transaction in November 2021. They aim to enable African businesses to make compliant global payments efficiently. - Vanguard of a new payments paradigm designed for Africans. - Addressing the high demand for foreign currency among African merchants. - Combating fragmentation and FX liquidity constraints in the payment system.

Overview CommIT Enterprises, Inc. is seeking an Information System Security Engineer (ISSE) to support government customer environments. This position is based in Charleston, SC but can be remote. This role blends handson cybersecurity engineering, security compliance support, and Risk Management Framework (RMF) activities with close collaboration across software development, DevSecOps, and system administration teams. The ISSE will work directly with the Information System Security Manager (ISSM) to ensure security controls, assessments, and authorization activities are executed effectively throughout the Software Development Life Cycle (SDLC). The position includes responsibility for supporting the Authorization to Operate (ATO) process within RAISE pipelines, reviewing security-related development artifacts, and evaluating CI/CD security outputs such as SAST, DAST, SBOMs, and CVSS scoring. As customer adoption of the RPOC platform grows, the ISSE will play a critical role in scaling security support and ensuring consistent, compliant implementation across all application teams. Established in 2001, CommIT is a Certified Veteran-Owned Small Business (CVOSB) providing innovative technical engineering and data science services. Our enterprise systems support includes the Department of Defense’s (DoD) GCSS-MC, CAC2S, TBMCS-MC, and the Department of Veteran’s Affairs’ (VA) telehealth communications. We offer acquisition management, systems engineering, Agile software development, cloud management, IT modernization, data analytics, cybersecurity, and training, including leading-edge DevSecOps, automated testing, and mobile application development. Responsibilities Your essential job functions will include but may not be limited to- - Support the ISSM in managing security requirements, documentation, and securityfocused engineering decisions throughout the SDLC, including Gitbased development workflows. - Review Merge/Pull Requests for security implications, control compliance, and adherence to secure coding and configuration standards. - Analyze CI/CD pipeline security outputs, including: – Static Application Security Testing (SAST) results – Dynamic Application Security Testing (DAST) results – Software Bill of Materials (SBOM) findings – CVSS scoring and vulnerability impact assessment - Support the execution and maintenance of the RAISE ATO pipeline, ensuring security control assessments align with mission and compliance requirements. - Assist in preparing, updating, and maintaining RMFaligned authorization documentation. - Perform continuous security monitoring activities and support incident response collaboration as needed. - Assist development, DevSecOps, and operations teams in interpreting security findings and determining secure technical paths forward. - Participate in technical discussions to ensure systems, functionalities, and updates integrate appropriate security controls. - Provide engineeringlevel troubleshooting related to security configurations, findings, and system behavior. - Contribute to the development and refinement of documentation for security processes, workflows, and compliance evidence. - Support audits, generate security artifacts, and prepare evidence packages as directed by the ISSM. - Scale support activities as customer adoption of the RPOC platform increases. Qualifications Required Experience and Education: - Master’s degree with 8 years of experience (or Bachelors with 10 years of experience) in Computer Science, Software Engineering, Computer Engineering, Mathematics or relevant field. Degree may be substituted with additional relevant industry experience and / or industry accepted training and certification. - Experience with SDLC, secure coding considerations, and security review of development artifacts. - Experience supporting ATO packages, RMF activities, or operational cybersecurity engineering roles is preferred. - Experience supporting DoD or federal enterprise systems - Familiarity with audit frameworks (RMF, NIST 800‑53, CMMC, etc.) - Knowledge of RPOC workflows, security requirements, and its role in the ATO/RAISE pipeline process - Experience reviewing or interpreting security outputs from CI/CD pipelines. - Understanding of secure software development practices, Git workflows, and DevSecOps tooling. - Strong analytical and communication skills for explaining security implications to technical and nontechnical stakeholders. - Ability to adapt quickly to shifting priorities and support multiple application teams as the environment scales. Security Requirements: - Secret Clearance with the ability to obtain a T5 - Security+ CE Equal Opportunity Employer: CommIT Enterprises, Inc. is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law.