Staff Applied Security Engineer
ServiceNow1 day ago
Responsibilities
- Partner with customer security, architecture, engineering, risk, compliance, and executive stakeholders to address security concerns and accelerate platform adoption.
- Develop customer-facing security reference architectures covering trust boundaries, data flows, identity models, encryption controls, and shared responsibility models.
- Conduct threat modeling for ServiceNow products, AI services, integrations, and customer deployment architectures.
- Analyze cloud-native and distributed-system security architectures and lead security deep dives across networking, identity, encryption, data protection, application security, and AI security controls.
- Evaluate customer security requirements against ServiceNow capabilities and industry best practices.
- Collaborate with Product Management, Engineering, Product Security, and Architecture teams to identify capability gaps and advocate for customer-driven improvements.
- Create architecture patterns, deployment guides, implementation accelerators, technical whitepapers, detection content, and security design documentation.
- Assess integrations involving AI, cloud services, APIs, Kubernetes environments, data platforms, and third-party technologies.
- Define secure deployment patterns for AI agents, model integrations, governance controls, and data protection mechanisms.
- Represent ServiceNow security architecture and best practices in customer workshops, architecture reviews, executive briefings, and security assessments.
Requirements
- At least 5 years of hands-on experience in security engineering, security architecture, cloud security, application security, product security, or related disciplines.
- Strong knowledge of identity and access management, authentication and authorization, network security, cryptography and key management, data protection and privacy, security monitoring and incident response, and secure software development.
- Experience assessing and securing cloud-native architectures.
- Strong knowledge of Kubernetes, container security, service-to-service communications, workload isolation, and modern application deployment patterns.
- Experience with AWS, Azure, or GCP.
- Experience conducting threat modeling using STRIDE, ATT&CK, PASTA, or similar frameworks.
- Ability to create and communicate architecture diagrams showing data flows, trust boundaries, security controls, and deployment models.
- Strong written and verbal communication skills and the ability to engage audiences from engineers to CISOs.
- Experience presenting security recommendations and architectural guidance to customers and executive stakeholders.
- Preferred experience supporting Fortune 500 or highly regulated enterprise customers and organizations in financial services, healthcare, or the public sector.
- Preferred knowledge of AI security, AI governance, model risk management, prompt injection risks, agentic systems, and emerging AI threats.
- Preferred experience using AI technologies for security operations, threat detection, security analysis, or engineering productivity.
- Familiarity with JavaScript, scripting, or automation development and the ServiceNow platform.
- Preferred experience developing security reference architectures, implementation patterns, or technical guidance consumed at scale.
- Industry certifications such as CISSP, CCSP, AWS Security Specialty, Azure Security Engineer, GSEC, GIAC, OSCP, or equivalent are preferred.
Benefits
- Flexible, remote, or required-in-office work personas are assigned based on the role and work location.
- Regular employee position in the North America and Canada region.
- Opportunity to influence product direction and engineering roadmaps while shaping secure AI and cloud-native architectures for major enterprises.
Categories
About ServiceNow
ServiceNow builds a cloud platform for enterprise digital workflows, covering IT service management, customer service, HR service delivery, security operations, and operations management, plus tools for custom app development. It sells subscription SaaS to large organizations and public-sector agencies to automate processes and connect data across systems. Founded in 2004 and headquartered in Santa Clara, California, ServiceNow is a public company listed on the NYSE under the ticker NOW.