Staff Software Engineer - Platform Security
ServiceNow2 days ago
Base Salary
$150k - $262k/yr
Responsibilities
- Design, build, and maintain scalable outbound security services for regulated environments and FIPS compliance.
- Architect and operate egress services, outbound proxies, and exfiltration detection systems in a multi-tenant SaaS platform.
- Own Kubernetes services end to end, including deployment, scaling, on-call support, and incident response.
- Apply threat modeling, secure coding, and rigorous design review practices to outbound security features.
- Evaluate and integrate practical AI/ML capabilities for egress anomaly detection, destination risk scoring, telemetry analysis, and secure code review.
- Translate compliance and security requirements into operational outbound security frameworks with product, security, and platform teams.
- Mentor engineers on SSRF, DNS rebinding, open redirects, unrestricted egress, and secure design practices.
- Track evolving exfiltration techniques, egress security, outbound TLS, and post-quantum readiness.
Requirements
- 8+ years of professional software engineering experience.
- Production-scale experience with Java, Go, or a comparable strongly typed language.
- Strong computer science fundamentals, including data structures, algorithms, object-oriented design, and distributed systems tradeoffs.
- Production experience running Kubernetes services with deployments and Helm in a SaaS or multi-tenant environment.
- Working knowledge of TCP/IP, DNS, HTTP, TLS/PKI, proxies, firewalls, and allowlisting/denylisting.
- Demonstrated secure coding, threat modeling, and code review discipline.
- Preferred: direct experience with outbound or egress security, forward proxies, SSRF mitigation, DNS security, data loss prevention, egress gateways, network policy enforcement, or TLS inspection.
- Preferred: experience with AuthN/AuthZ, IAM, certificates, identity, secure connectivity, and external network topology.
- Preferred: hands-on application of AI/ML to security or operations problems or critical integration of LLM tooling into engineering workflows.
- Preferred: experience with FIPS 140-2/3, FedRAMP, Common Criteria, or similar regulated environments.
- Preferred: exposure to post-quantum cryptography for outbound TLS and secure communications.
- Preferred: experience mentoring engineers and improving security practices across a team.
Benefits
- Base pay of $149,800 - $262,200, plus equity when applicable and variable or incentive compensation.
- Health plans including flexible spending accounts, a 401(k) plan with company match, ESPP, matching donations, flexible time away, and family leave programs.
- Flexible work persona within a distributed work environment, subject to role and location eligibility.
- Regular employee position in the North America and Canada region.
Tech Stack
Categories
About ServiceNow
ServiceNow builds a cloud platform for enterprise digital workflows, covering IT service management, customer service, HR service delivery, security operations, and operations management, plus tools for custom app development. It sells subscription SaaS to large organizations and public-sector agencies to automate processes and connect data across systems. Founded in 2004 and headquartered in Santa Clara, California, ServiceNow is a public company listed on the NYSE under the ticker NOW.