Senior Information Security Analyst

Salary: $127,600 - 216,900 per year Requirements:

• We require 3-5+ years of professional experience in information security, application security, or closely related work, or equivalent experience paired with relevant education.
• We require ServiceNow Certified System Administrator (CSA) certification.
• We prefer at least two of the following certifications: Azure AI Fundamentals, AWS Certified AI Practitioner, Offensive Security Web Assessor (OSWA), GIAC Web Application Penetration Tester (GWAPT), GIAC Security Essentials Certification (GSEC), GIAC Certified Incident Handler (GCIH), CISSP, or CISM.
• We need a strong understanding of cloud computing models, including major hyperscaler environments.
• We expect hands-on experience with security tools and technologies such as SIEM, logging tools, load balancers, firewalls, WAFs, IDS/IPS, vulnerability management platforms, and encryption methods.
• We look for basic to intermediate programming knowledge in Java or JavaScript, with the ability to read, interpret, and explain code.
• We prefer intermediate to advanced proficiency with web proxy tools for security testing and assessments.
• We expect deep knowledge of web application security, including OWASP Top Ten vulnerabilities and mitigation approaches.
• We need the ability to explain security risks clearly to non-technical stakeholders.
• We require solid knowledge of compliance and regulatory frameworks such as NIST, CIS, GDPR, HIPAA, PCI DSS, and ISO standards.
• We value experience with AI technologies and the ability to design AI-driven solutions.
• We look for strong analytical and problem-solving skills.
• We expect excellent verbal and written communication skills.
• We value the ability to thrive in a collaborative, team-oriented, follow-the-sun environment.
• We need the ability to explain security concepts and risk in simple, customer-friendly language.
• We require a bachelors degree in computer science, information security, or relevant information security experience.
• We consider hands-on experience with web-based vulnerability exploitation a strong advantage.

• We represent our security organization in customer-facing incidents, cases, findings, tasks, questions, and calls related to security and privacy.
• We own, triage, investigate, and respond to security issues affecting the ServiceNow platform while ensuring timely communication and resolution.
• We act as the primary point of contact for security-related matters for internal and external stakeholders.
• We coordinate the efficient flow and triage of security incidents and cases by working with customers and internal ServiceNow teams.
• We build customer trust and confidence through strong service and clear communication.
• We manage customer outreach and escalation communications for security matters.
• We strengthen security process maturity by defining and refining capability maturity models.
• We create and improve documentation and operational processes to raise security maturity and excellence.
• We design and deliver training and enablement programs on security awareness and best practices for internal and external audiences.
• We develop AI solutions to automate repetitive work and create new AI-enabled approaches.
• We partner with Legal on security and privacy matters and collaborate with a global team across multiple time zones.
• We provide on-call support on a rotating basis, including weekends, public holidays, and after-hours coverage as scheduled.

• AI
• AWS
• Azure
• Cloud
• Flow
• Support
• Java
• JavaScript
• OWASP
• Security
• ServiceNow
• Web

More:

We are ServiceNow, the AI control tower for business reinvention, helping organizations work smarter, faster, and better through our AI platform that unifies AI, data, and workflows. Our ServiceNow Security Organization protects our company and customers by delivering innovative security solutions that reduce risk and support trusted cloud adoption. The Global Security Support Centre is a diverse, highly skilled team that works across internal functions and with customers to strengthen security posture, improve trust, and deliver secure, reliable outcomes. We foster an inclusive, innovative, and excellence-driven environment where people can make meaningful impact. This role offers a base pay of $127,600 - $216,900 plus equity where applicable, variable compensation, and benefits including health plans, flexible spending accounts, a 401(k) with company match, ESPP, matching donations, flexible time away, and family leave programs. We support flexible, remote, or in-office work personas depending on the role and location.

last updated 33 week of 2026