Senior Staff Privacy Engineer - Moveworks

ServiceNow; Mountain View (CA); Remote; USD 190,000 - 260,000; Full time

Job summary

Moveworks, now part of ServiceNow, is seeking a Senior Staff Privacy Engineer to shape data protection across our ML-powered products. You will write production code, improve data detection and masking, and own privacy controls from design through production.

You will collaborate with Privacy, ML, Security, Product and Infrastructure teams, assess models, deploy privacy-preserving evaluations, and drive data-use and retention policies across services and data stores.

Qualifications

• 7+ years building production software with privacy engineering and applied ML.
• Strong Python skills and experience with Go, Java, C++ or other production languages.
• Shipped, tested and operated production software.
• Experience evaluating, selecting and deploying ML models, including dataset curation and model serving.
• Experience building sensitive data detection and masking systems and their tradeoffs.
• Experience assessing privacy risks in ML/LLM systems and implementing mitigations.
• Understanding of data minimization, pseudonymization, anonymization and re-identification risk.
• Experience building data protection in distributed cloud systems and lifecycle controls.

Responsibilities

• Assess, benchmark and select ML models meeting privacy requirements.
• Own the implementation of models from prototype through production and optimize performance.
• Build privacy-preserving data detection, masking, redaction and tokenization across data stores and tools.
• Write and maintain privacy controls for data use, access, retention and deletion.
• Prototype privacy-preserving evaluation approaches and synthetic data.
• Conduct privacy design reviews and build reusable components for protection across teams.
• Monitor privacy controls in production and drive improvements.

Skills

Python

Go

Java

C++

ML

Privacy engineering

Tools

Docker

Kubernetes

TensorFlow Serving

PyTorch

Job description

• Full-time
• Employee Type: Regular
• Region: AMS - North America and Canada
• Work Persona: Flexible or Remote

Company Description

Who we are

Moveworks is the Agentic AI Assistant platform that empowers the entire workforce.

Our platform enables employees to converse with all of their business systems through natural language to quickly find answers and automate tasks. Powered by the world's most advanced LLMs, our proprietary models, and a sophisticated Agentic AI platform, we're transforming how work gets done by allowing AI to take initiative, streamline complex workflows, and continuously learn and adapt.

Moveworks is trusted by over 5.5 million employees at more than 350 of the world’s largest companies, including 10% of the Fortune 500, to automate everyday tasks and streamline business operations. Recognized on the Forbes Cloud 100 and AI 50 lists, Moveworks was also named one of Fast Company’s 2025 Most Innovative Companies and Inc’s Best in Business, in the Best in Innovation category. Moveworks was also recognized at Microsoft’s 2025 Partner of the Year and in 2024, received the AI Breakthrough Award.

In December 2025, Moveworks was acquired by ServiceNow, marking a pivotal milestone in our journey to create a single front door to work for all business systems. By combining ServiceNow’s leading workflow automation with Moveworks’ Reasoning Engine and natural language capabilities, we deliver the AI platform for every person and every workflow. Built to go beyond basic summaries to deliver meaningful business impact. Together, our AI acts across enterprise systems to turn conversations into completed work.

By joining our team, you’ll be at the forefront of the AI transformation, backed by the global scale of ServiceNow and the agility of a high-growth company. We are looking for world‑class talent to help us extend agentic AI to every employee across every corner of the business.

ServiceNow
It all started in sunny San Diego, California in 2004 when a visionary engineer, Fred Luddy, saw the potential to transform how we work. Fast forward to today — ServiceNow stands as a global market leader, bringing innovative AI-enhanced technology to over 8,100 customers, including 85% of the Fortune 500®. Our intelligent cloud-based platform seamlessly connects people, systems, and processes to empower organizations to find smarter, faster, and better ways to work. But this is just the beginning of our journey. Join us as we pursue our purpose to make the world work better for everyone.

Job Description

Our AI products rely on sensitive data to enable customers to get work done. With this in mind, privacy is a crucial part of ensuring that data is handled properly throughout the workflow, from what we collect and how we use it to the controls we apply across models, tools, logs and data pipelines. In this role, you will be a key privacy engineer, writing code and shaping the architecture and protections across our products. You will improve sensitive data detection and masking, assess the privacy risks of ML models, and own the implementation of customer data-use and retention controls. You will work with our Privacy, ML, Security, Product and Infrastructure teams from design through production.

This is a Senior Staff individual contributor role. You will be hands on, setting technical direction across teams and writing production code.

What you get to do in this role:

Assess, benchmark and select ML models and techniques that meet our privacy requirements. Build representative evaluation datasets and compare detection coverage, false positives, latency, cost and the impact on product quality.

Own the implementation of those models in our products, from prototype through production. Train or fine‑tune where needed, build the surrounding services and APIs, and optimize inference performance and reliability.

Build and deploy sensitive data detection, masking, redaction and tokenization for structured and unstructured data across logs, traces, APIs, analytics and annotation tools. Implement consistent controls for when data is masked and who can access the unmasked content.

Build privacy evaluations for ML models and the systems around them, including memorization, training-data extraction, membership inference and sensitive data disclosure through retrieval or tool use. Implement mitigations and add regression tests to model and product release workflows.

Write and maintain code that enforces customer requirements for data use, access, retention and deletion across services and data stores, including the distinction between permitted inference, evaluation, annotation and training.

Prototype and implement privacy-preserving approaches to evaluation and synthetic data. Measure privacy risk and utility, validate the assumptions behind the approach, and integrate suitable solutions into our ML pipelines.

Conduct privacy design reviews with engineering, identify gaps in proposed data flows and architectures, and own or partner on the code changes needed to address them. Build reusable components and engineering standards that help teams apply these protections consistently.

Monitor privacy controls and models in production, investigate failures, and ship improvements. Use error analysis and production feedback to improve detection quality, address regressions and close customer–reported privacy issues.

What success looks like in your first year:

ML models selected and deployed for priority privacy use cases, with measured improvements in detection quality and acceptable production latency and cost.

Shared masking and data protection components integrated into the highest-priority product surfaces, with automated tests for coverage and access behavior.

Repeatable privacy evaluations running as part of model and product releases, with findings translated into shipped fixes.

Priority data‑use, retention and deletion requirements implemented and verified in production, with monitoring that identifies failures.

Qualifications

To be successful in this role you have:

Typically 7+ or more years building production software, including substantial experience in privacy engineering and applied ML.

Strong Python skills and experience with Go, Java, C++ or another production systems language. You have shipped, tested and operated production software.

Hands‑on experience evaluating, selecting and deploying ML models, including dataset curation, model adaptation or fine‑tuning, error analysis and model serving.

Experience building sensitive data detection and masking systems, including their accuracy, performance and integration tradeoffs.

Experience assessing privacy risks in ML and LLM systems and implementing mitigations. You can explain what your tests establish and where uncertainty remains.

Deep understanding of data minimization, pseudonymization, anonymization and re‑identification risk, including the limits of removing direct identifiers.

Experience building data protection and lifecycle controls in distributed cloud systems.

A record of taking ambiguous engineering problems from design through delivery, setting technical direction across teams and mentoring engineers.

Preferred experience:

Applying differential privacy or other privacy‑enhancing technologies, including evaluating their assumptions and privacy‑utility tradeoffs.

Privacy engineering for agentic systems, retrieval‑augmented generation, embeddings or synthetic datasets.

Experience in enterprise, multi‑tenant or regulated environments, and translating privacy requirements such as GDPR and CCPA into technical controls.

Additional Information

We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here . To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service.

Equal Opportunity Employer

ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, gender identity, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements.

Accommodations

We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact [e-mail] for assistance.

Export Control Regulations

For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities.