Staff Applied Security Engineer
ServiceNow1 day ago
Responsibilities
- Partner with customer security, architecture, engineering, risk, compliance, and executive stakeholders to resolve security concerns and accelerate ServiceNow platform adoption.
- Develop customer-facing security reference architectures covering trust boundaries, data flows, identity models, encryption controls, and shared responsibility models.
- Conduct threat modeling for ServiceNow products, AI services, integrations, and customer deployment architectures.
- Analyze cloud-native and distributed-system security architectures and lead security deep dives across networking, identity, encryption, data protection, application security, and AI security.
- Evaluate customer security requirements against ServiceNow capabilities and industry best practices.
- Collaborate with Product Management, Engineering, Product Security, and Architecture teams to identify capability gaps and advocate for customer-driven improvements.
- Create architecture patterns, deployment guides, implementation accelerators, technical whitepapers, detection content, and security design documentation.
- Assess integrations involving AI, cloud services, APIs, Kubernetes environments, data platforms, and third-party technologies.
- Define secure deployment patterns for AI agents, model integrations, governance controls, and data-protection mechanisms.
- Represent ServiceNow security architecture and best practices in customer workshops, architecture reviews, executive briefings, and security assessments.
Requirements
- At least 5 years of hands-on experience in security engineering, security architecture, cloud security, application security, product security, or related disciplines.
- Strong understanding of identity and access management, authentication and authorization, network security, cryptography and key management, data protection and privacy, security monitoring and incident response, and secure software development.
- Experience assessing and securing cloud-native architectures.
- Strong knowledge of Kubernetes, container security, service-to-service communications, workload isolation, and modern application deployment patterns.
- Experience with one or more of Amazon Web Services, Microsoft Azure, or Google Cloud Platform.
- Experience conducting threat modeling using STRIDE, ATT&CK, PASTA, or similar frameworks.
- Ability to create and communicate architecture diagrams showing data flows, trust boundaries, security controls, and deployment models.
- Strong written and verbal communication skills and the ability to engage engineers through CISOs.
- Experience presenting security recommendations and architectural guidance to customers and executive stakeholders.
- Preferred qualifications include experience with Fortune 500 or highly regulated customers; financial services, healthcare, or public-sector organizations; AI security, governance, model risk management, prompt-injection risks, agentic systems, and emerging AI threats; AI-assisted security operations or threat detection; JavaScript, scripting, or automation; the ServiceNow platform; scalable security reference architectures and technical guidance; and certifications such as CISSP, CCSP, AWS Security Specialty, Azure Security Engineer, GSEC, GIAC, or OSCP.
Benefits
- Flexible, remote, or required-in-office work personas are assigned based on the role and work location.
- Regular employee position in the AMS - North America and Canada region.
- Equal opportunity and accessible application accommodations are provided.
Categories
About ServiceNow
ServiceNow builds a cloud platform for enterprise digital workflows, covering IT service management, customer service, HR service delivery, security operations, and operations management, plus tools for custom app development. It sells subscription SaaS to large organizations and public-sector agencies to automate processes and connect data across systems. Founded in 2004 and headquartered in Santa Clara, California, ServiceNow is a public company listed on the NYSE under the ticker NOW.