Movable Ink
Pick a job to read the details
Tap any role on the left — its description and apply link will open here.
Product Security Engineer
Share this job
Movable Ink is hiring a Product Security Engineer to help secure our codebases, CI/CD pipelines, and development practices. To succeed in this role, you'll balance a security-first mindset with a practical understanding of how engineering teams ship software—finding ways to reduce risk without slowing down delivery. This is a hands-on opportunity to build and improve the automation that keeps our code and infrastructure safe, working closely with both the Security and Engineering teams. As AI coding tools and supply chain attacks increase risk across the industry, this role is critical to staying ahead of vulnerabilities before they reach production.
Responsibilities:
- Implement and maintain static application security testing (SAST) using Semgrep across our repositories
- Configure and improve software composition analysis (SCA) tooling (Dependabot) to identify vulnerable dependencies
- Manage secrets detection scanning (Trufflehog) and respond to findings
- Integrate security scanning into CI/CD pipelines (GitHub Actions) to catch issues before code is merged
- Triage and prioritize vulnerability findings, working with engineering teams to drive remediation
- Support dynamic application security testing (DAST) efforts using tools like ZAP
- Contribute to our Application Security Posture Management (ASPM) platform to centralize findings and track remediation
- Set up and configure automation scripts to support our vulnerability management practices
- Document secure coding guidelines and help educate developers on security best practices
- Evaluate and recommend new security tools as the landscape evolves
Qualifications:
- 2+ years of experience in application security, DevSecOps, or a security-focused software engineering role
- Hands-on experience with SAST, SCA, or secrets scanning tools (Semgrep, Dependabot, Snyk, or similar)
- Familiarity with CI/CD pipelines and GitHub Actions
- Understanding of common web application vulnerabilities (OWASP Top 10) and how to detect/prevent them
- Experience reading and reviewing code in at least one language (Ruby, Python, JavaScript, or Go preferred)
- Comfortable navigating codebases and working with engineering teams to explain and prioritize security findings
- Strong written communication skills for documentation and customer-facing security responses
- Self-motivated and able to manage competing priorities in a fast-paced environment
The base pay range for this position is $170,000-$200,000/year, which can include additional bonus depending on the position ultimately offered, in addition to a full range of medical, financial, and/or other benefits. The base pay offered may vary depending on job-related knowledge, skills, and experience.
Studies have shown that women, communities of color, and historically underrepresented people are less likely to apply to jobs unless they meet every single qualification. We are committed to building a diverse and inclusive culture where all Inkers can thrive. If you’re excited about the role but don’t meet all of the abovementioned qualifications, we encourage you to apply. Our differences bring a breadth of knowledge and perspectives that makes us collectively stronger.
We welcome and employ people regardless of race, color, gender identity or expression, religion, genetic information, parental or pregnancy status, national origin, sexual orientation, age, citizenship, marital status, ethnicity, family or marital status, physical and mental ability, political affiliation, disability, Veteran status, or other protected characteristics. We are proud to be an equal opportunity employer.
Ready to apply?
Apply to Movable Ink
Product Security Engineer
Share this job
Movable Ink is hiring a Product Security Engineer to help secure our codebases, CI/CD pipelines, and development practices. To succeed in this role, you'll balance a security-first mindset with a practical understanding of how engineering teams ship software: finding ways to reduce risk without slowing down delivery. This is a hands-on opportunity to build and improve the automation that keeps our code and infrastructure safe, working closely with both the Security and Engineering teams. As AI coding tools and supply chain attacks increase risk across the industry, this role is critical to staying ahead of vulnerabilities before they reach production.
Responsibilities:
- Implement and maintain static application security testing (SAST) using Semgrep across our repositories
- Configure and improve software composition analysis (SCA) tooling (Dependabot) to identify vulnerable dependencies
- Manage secrets detection scanning (Trufflehog) and respond to findings
- Integrate security scanning into CI/CD pipelines (GitHub Actions) to catch issues before code is merged
- Triage and prioritize vulnerability findings, working with engineering teams to drive remediation
- Support dynamic application security testing (DAST) efforts using tools like ZAP
- Contribute to our Application Security Posture Management (ASPM) platform to centralize findings and track remediation
- Set up and configure automation scripts to support our vulnerability management practices
- Document secure coding guidelines and help educate developers on security best practices
- Evaluate and recommend new security tools as the landscape evolves
Qualifications:
- 2+ years of experience in application security, DevSecOps, or a security-focused software engineering role
- Hands-on experience with SAST, SCA, or secrets scanning tools (Semgrep, Dependabot, Snyk, or similar)
- Familiarity with CI/CD pipelines and GitHub Actions
- Understanding of common web application vulnerabilities (OWASP Top 10) and how to detect/prevent them
- Experience reading and reviewing code in at least one language (Ruby, Python, JavaScript, or Go preferred)
- Comfortable navigating codebases and working with engineering teams to explain and prioritize security findings
- Strong written communication skills for documentation and customer-facing security responses
- Self-motivated and able to manage competing priorities in a fast-paced environment
The base pay range for this position is $133,000-$173,000 CAD/year, which can include additional bonus depending on the position ultimately offered, in addition to a full range of medical, financial, and/or other benefits. The base pay offered may vary depending on job-related knowledge, skills, and experience.
Studies have shown that women, communities of color, and historically underrepresented people are less likely to apply to jobs unless they meet every single qualification. We are committed to building a diverse and inclusive culture where all Inkers can thrive. If you’re excited about the role but don’t meet all of the abovementioned qualifications, we encourage you to apply. Our differences bring a breadth of knowledge and perspectives that makes us collectively stronger.
We welcome and employ people regardless of race, color, gender identity or expression, religion, genetic information, parental or pregnancy status, national origin, sexual orientation, age, citizenship, marital status, ethnicity, family or marital status, physical and mental ability, political affiliation, disability, Veteran status, or other protected characteristics. We are proud to be an equal opportunity employer.
Ready to apply?
Apply to Movable Ink
Senior Analyst - Information Security
Share this job
The Senior Analyst, Information Security will be a part of the team responsible for assisting clients and prospects with security and privacy inquiries, managing the daily flow of questionnaires, assessments, and trust related requests, and security and compliance strategy to protect Movable Ink’s platform. You'll work closely with leaders from around the organization to support a strong security posture aimed at protecting our customers' data. This includes ensuring that information security controls are operating effectively and incrementally improved.
Responsibilities:
- Triage, prioritize, and manage incoming client and prospect security requests across email, Zendesk, and other intake channels.
- Investigate and troubleshoot complex issues, perform root-cause analysis, provide advice on risk management strategies, and support the implementation of risk mitigation measures
- Review various manual processes across the program and find innovative solutions to use automation where possible for process efficiency
- Coordinate across a variety of teams to gather information and resolve client inquiries
- Perform light TPRM intake and triage, including logging new vendor requests and coordinating basic review steps.
- Support the TPRM process by tracking vendor assessments and maintaining status visibility for stakeholders.
- Assist with internal and external audits, ensuring security practices comply with relevant regulations.
- Stay informed of industry trends, security threats, and regulatory changes, recommending adjustments to access control policies as needed.
Qualifications:
- 3-5 years of experience in a security analyst focused role
- Foundational knowledge of information security, compliance, and SaaS environments
- Experience working with ticketing platforms and Trust Center platforms (or similar tools)
- Excellent troubleshooting skills and the ability to logically think through problem resolution
- Strong communication skills across all levels and departments of the organization
- Must possess high attention to detail and the ability to prioritize work while successfully managing multiple projects and deadlines with minimal oversight
- Exposure to privacy or security-related compliance frameworks preferred (e.g., SOC2, ISO 27,000 series, and GDPR)
- Security related certification(s) a plus
Studies have shown that women, communities of color, and historically underrepresented people are less likely to apply to jobs unless they meet every single qualification. We are committed to building a diverse and inclusive culture where all Inkers can thrive. If you’re excited about the role but don’t meet all of the abovementioned qualifications, we encourage you to apply. Our differences bring a breadth of knowledge and perspectives that makes us collectively stronger.
We welcome and employ people regardless of race, color, gender identity or expression, religion, genetic information, parental or pregnancy status, national origin, sexual orientation, age, citizenship, marital status, ethnicity, family or marital status, physical and mental ability, political affiliation, disability, Veteran status, or other protected characteristics. We are proud to be an equal opportunity employer.
Ready to apply?
Apply to Movable Ink
Deal Desk Analyst
Share this job
The Deal Desk team’s primary objective is to ensure that complex, high-value deals make their way through internal processes with cross-functional alignment with a focus on achieving the company’s objectives. As a key member, you will help shape negotiation strategies for complex deals and become a trusted advisor to the sales team. If you are a highly motivated individual who thrives in a fast-paced environment and is not afraid to take initiative, this is the right role for you.
Responsibilities:
- Manage non-standard deals through the review process to assess risk, ensure quality assurance, business, and operational compliance
- Collaborate with various teams such as sales, legal, and finance to facilitate deal execution and resolve any issues or conflicts that may arise during the process
- Maintain commercial details in Salesforce and help standardize custom terms across regions, products and channels to enable predictable outcomes
- Serve as a trusted advisor by providing guidance and insights to the sales team on optimal deal structure and pricing
- Assist in streamlining key operational workflows to support efficient and sustainable growth
- Drive improvements in reporting and dashboards to measure outcomes and track key metrics
- Provide ongoing support in documenting our processes as well as best practices and lessons learned in deal strategy
- Foster a high-performing team environment by proactively seeking out opportunities for personal and team development
Qualifications:
- 3+ years of experience in a relevant field (e.g. sales operations, revenue operations, order management, or deal strategy, tech/SaaS background a plus)
- Proficiency in Salesforce (CPQ a plus), Excel, and Google Sheets
- Ability to build relationships and trust with internal stakeholders at all levels across all functions
- Project management and risk assessment abilities
- Operates with minimal supervision and high discretion
- Organizational and analytical skills
- Out of the box thinker and ability to think creatively to solve problems
Studies have shown that women, communities of color, and historically underrepresented people are less likely to apply to jobs unless they meet every single qualification. We are committed to building a diverse and inclusive culture where all Inkers can thrive. If you’re excited about the role but don’t meet all of the abovementioned qualifications, we encourage you to apply. Our differences bring a breadth of knowledge and perspectives that makes us collectively stronger.
We welcome and employ people regardless of race, color, gender identity or expression, religion, genetic information, parental or pregnancy status, national origin, sexual orientation, age, citizenship, marital status, ethnicity, family or marital status, physical and mental ability, political affiliation, disability, Veteran status, or other protected characteristics. We are proud to be an equal opportunity employer.
Ready to apply?
Apply to Movable Ink