Staff Applied Security Engineer

Company DescriptionIt all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could do that for everyone—freeing people from busywork so they could focus on meaningful work. Today, ServiceNow is the AI control tower for business reinvention. Our ServiceNow AI platform brings together any AI, any data, and any workflow— helping 85% of the Fortune 500 work smarter, faster, and better. We're building an AI-native culture where technology and talent are unstoppable together. And we're just getting started.Join us to put AI to work for people.Job DescriptionThe TeamThe Architecture Consulting & Engineering Services (ACES) team is a security-focused consulting and engineering organization that partners with many of ServiceNow's largest and most highly regulated customers. We help security teams understand, evaluate, and securely adopt the ServiceNow platform, AI capabilities, and emerging technologies.Our mission is to establish ServiceNow as a trusted security partner by delivering deep technical guidance, security architecture expertise, threat modeling, reference architectures, and customer-facing security engineering engagement. We operate at the intersection of Security, Product, Engineering, and Customer Success to accelerate platform adoption while ensuring customers can meet their security, compliance, and risk-management objectives.The RoleWe are seeking an experienced Applied Security Engineer to join the ACES team.This is not a traditional consulting role, nor is it a traditional product security role. We are looking for a hands-on security practitioner who can dive deep into cloud-native architectures, analyze distributed systems, validate security controls, conduct threat modeling exercises, and communicate effectively with customer security teams, architects, engineers, CISOs, and executives.You will work directly with Fortune 500 organizations, including some of the world's largest financial services and healthcare institutions, helping them securely adopt ServiceNow platform capabilities, AI solutions, cloud services, and emerging technologies.Success in this role requires technical depth, customer credibility, and the ability to translate complex security concepts into practical architectural guidance.What You Get To Do In This RolePartner directly with customer security, architecture, engineering, risk, compliance, and executive stakeholders to address security concerns and accelerate platform adoption.Develop customer-facing security reference architectures that clearly articulate trust boundaries, data flows, identity models, encryption controls, and shared responsibility models.Perform threat modeling exercises for ServiceNow products, AI services, integrations, and customer deployment architectures.Analyze security architectures across cloud-native and distributed systems environments.Lead security deep dives covering networking, identity, encryption, data protection, application security, and AI security controls.Evaluate customer security requirements and map them to ServiceNow platform capabilities and industry best practices.Work closely with Product Management, Engineering, Product Security, and Architecture teams to identify capability gaps and advocate for customer-driven improvements.Build scalable artifacts including architecture patterns, deployment guides, implementation accelerators, technical whitepapers, detection content, and security design documentation.Assess integrations involving AI, cloud services, APIs, Kubernetes environments, data platforms, and third-party technologies.Help define secure deployment patterns for emerging AI capabilities including agents, model integrations, governance controls, and data protection mechanisms.Represent ServiceNow security architecture and best practices during customer workshops, architecture reviews, executive briefings, and security assessments.QualificationsTo Be Successful In This Role You Have5+ years of hands-on experience in security engineering, security architecture, cloud security, application security, product security, or related disciplines.Strong understanding of core security principles including identity and access management; authentication and authorization; network security; cryptography and key management; data protection and privacy; security monitoring and incident response; and secure software development.Experience assessing and securing cloud-native architectures.Strong knowledge of Kubernetes, container security, service-to-service communications, workload isolation, and modern application deployment patterns.Experience with one or more major cloud providers: Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform (GCP).Experience conducting threat modeling using frameworks such as STRIDE, ATT&CK, PASTA, or similar methodologies.Ability to build and communicate architecture diagrams that clearly articulate data flows, trust boundaries, security controls, and deployment models.Strong written and verbal communication skills with the ability to engage audiences ranging from engineers to CISOs.Experience presenting security recommendations and architectural guidance to customers and executive stakeholders.A curious mindset and willingness to continuously learn emerging technologies including AI, cloud-native platforms, and modern security architectures.Preferred QualificationsExperience supporting Fortune 500 or highly regulated enterprise customers.Experience working with financial services, healthcare, or public sector organizations.Knowledge of AI security, AI governance, model risk management, prompt injection risks, agentic systems, and emerging AI threats.Experience using AI technologies to improve security operations, threat detection, security analysis, or engineering productivity.Familiarity with JavaScript, scripting, or automation development.Experience with the ServiceNow platform.Experience developing security reference architectures, implementation patterns, or technical guidance consumed at scale.Industry certifications such as CISSP, CCSP, AWS Security Specialty, Azure Security Engineer, GSEC, GIAC, OSCP, or equivalent.Why This Role Is UniqueThis role sits at the intersection of customer engagement, security engineering, cloud architecture, and AI security. You'll help some of the world's largest organizations make security decisions that directly influence platform adoption, AI strategy, and enterprise risk management.You'll have the opportunity to shape product direction, influence engineering roadmaps, develop industry-leading security architectures, and help define how ServiceNow brings secure AI and cloud-native innovation to the world's most demanding customers.Additional InformationWork PersonasWe approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service.Equal Opportunity EmployerServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, gender identity, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements. AccommodationsWe strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact View email address on click.appcast.io for assistance.Export Control RegulationsFor positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities.From Fortune. 2026 Fortune Media IP Limited. All rights reserved. Used under license.SummaryType: Full-timeFunction: EngineeringExperience level: Not ApplicableIndustry: Information Technology And Services