Staff Security Engineer | Enterprise Security

It all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could do that for everyone—freeing people from busywork so they could focus on meaningful work. Today, ServiceNow is the AI control tower for business reinvention. Our ServiceNow AI platform brings together any AI, any data, and any workflow— helping 85% of the Fortune 500® work smarter, faster, and better. We're building an AI-native culture where technology and talent are unstoppable together. And we're just getting started. Join us to put AI to work for people. Eligibility This position supports Government of Canada Protected B workloads. To be considered, you must: - Be a Canadian citizen or Canadian permanent resident. - Live in Canada and perform all work from within Canada. - Obtain and maintain Government of Canada Reliability Status. Screening requires five years of verifiable background history and includes identity verification, education verification, a criminal record check, and a credit check. You don’t need to hold Reliability Status today. ServiceNow sponsors the screening through our Company Security Officer under Public Services and Procurement Canada’s Contract Security Program. PLEASE DO NOT APPLY IF YOU DO NOT MEET THE ABOVE ELIGIBILITY, Thank you The ServiceNow Security Organization (SSO) The ServiceNow Security Organization (SSO) delivers world-class, innovative security solutions to reduce risk and protect the company and our customers. We enable our customers to migrate their most sensitive data and workloads to the cloud, accelerating our business so that we are the most trusted SaaS provider.

We create an environment where our employees are proud to work and can make a positive impact What You’ll Do - Engineer, harden, and operate security controls across on-premises, cloud, and isolated infrastructure. - Build automation and infrastructure-as-code that streamlines security operations, reporting, and remediation. - Partner with infrastructure, application, and platform owners to drive remediation and track compliance against CIS and NIST baselines. - Support security tooling across identity, vulnerability scanning, logging, and cloud security based on team priorities. - Produce operational and executive-facing reporting on security posture and performance. Required Qualifications - 8+ years of hands-on security engineering or systems administration experience in large-scale enterprise environments. - Strong Linux administration and troubleshooting skills, with working knowledge of Windows and directory services (Active Directory, LDAP). - Proficiency in Python, plus PowerShell or Bash, for production-grade automation and integrations. - Experience with infrastructure-as-code and DevOps practices, including Terraform, Ansible or Puppet, CI/CD pipelines, and Git-based workflows. - Solid understanding of network security fundamentals, including firewalls, segmentation, proxies, and DNS. - Experience hardening systems against CIS, STIG, or NIST baselines and translating requirements into technical controls. - Understanding of Canada Protected B classification and data residency requirements for Canadian government systems. Specialty Experience (Hands-On Experience in At Least Two Areas) - Identity and Access Management: PAM (BeyondTrust or CyberArk), SailPoint IIQ, or SSO platforms such as PingFederate or ForgeRock. - Vulnerability Management: Tenable SC and IO scan design and tuning, and risk-based prioritization using CVSS, EPSS, and known exploited vulnerability data. - Public Cloud Security: GCP security with working knowledge of AWS or Azure, Wiz, and CSPM, DSPM, or KSPM tooling. - Security Data Platforms: Distributed on-premises Splunk administration and Cribl Stream or Edge.