Staff Security Engineer | Security Engineering
ServiceNow1 day ago
Remote, Canada or Toronto, CanadaStaff+
Responsibilities
- Serve as the senior technical authority for security engineering in the Canadian regulated environment.
- Engineer, harden, and operate security controls across on-premises, cloud, and isolated infrastructure.
- Build automation and infrastructure-as-code for security engineering, operations, reporting, and remediation.
- Partner with infrastructure, application, and platform owners to drive remediation and track CIS and NIST compliance.
- Support identity, vulnerability scanning, logging, cloud security, and ServiceNow security tooling.
- Produce operational and executive-facing security posture and performance reporting.
Requirements
- At least 8 years of hands-on security or systems engineering experience in large-scale enterprise environments.
- Expert Linux administration and troubleshooting across OS internals, host networking, storage, virtualization, and containers, with proficiency in DNS, NTP, and LDAP.
- Production-grade automation and integration experience with Python and Shell.
- Experience with infrastructure-as-code, configuration management, CI/CD pipelines, and Git-based workflows, including Terraform, Ansible, or Puppet.
- Expertise in network security fundamentals including firewalls, segmentation, load balancers, and proxies.
- Experience hardening systems against CIS, STIG, or NIST baselines and translating requirements into technical controls.
- Experience using AI tools, workflows, insights, or evaluations in professional work.
- Understanding of Canada Protected B classification and Canadian government data residency requirements.
- Hands-on experience in at least two specialty areas including IAM, vulnerability management, public cloud security, security data platforms, infrastructure security, ServiceNow administration, or ServiceNow Security Operations.
- Canadian citizenship or permanent residency, residence and work within Canada, and successful completion and maintenance of Government of Canada Reliability Status screening.
- Preferred qualifications include CISSP, CCSP, CISM, ServiceNow CSA, Tenable Certified Engineer, Cribl Admin, or GCP security certification; regulated or air-gapped government experience; and ITIL or ITSM knowledge.
Benefits
- ServiceNow sponsors the Government of Canada Reliability Status screening through its Company Security Officer under the Contract Security Program.
- Flexible or remote work persona, subject to eligibility and assigned work location.
- Regular employee position in Canada.
Tech Stack
About ServiceNow
ServiceNow builds a cloud platform for enterprise digital workflows, covering IT service management, customer service, HR service delivery, security operations, and operations management, plus tools for custom app development. It sells subscription SaaS to large organizations and public-sector agencies to automate processes and connect data across systems. Founded in 2004 and headquartered in Santa Clara, California, ServiceNow is a public company listed on the NYSE under the ticker NOW.