Staff Security Engineer, ServiceNow
DevSecOps
Cloud-based digital workflows for enterprises
Job no longer available
Cloud-based digital workflows for enterprises
1001+ employees
Job no longer available
1001+ employees
Company mission
To transform IT to revolutionise the enterprise.
Role
Who you are
- A passion for Software Security, or Security in general
- 2+ years of experience with static application security testing, dynamic application security testing or software composition analysis tool chains
- 6+ years of experience as a build engineer or developer, including expertise in dependency management tools (e.g., Maven, Gradle, and NPM) and CI/CD platforms (e.g., Jenkins)
- Lead or significantly contributed to medium-to-large feature releases; usually multi-person projects that cross engineering team boundaries.
- Become a clear expert in one or more technical areas.
- Mentored multiple engineers.
- Experience designing or working within large, multi-system architectures, particularly ones deployed to Cloud Infrastructure (AWS, GCP, etc.)
- 4+ years of Linux experience and 4+ years of programming experience in any language and the ability to learn or write in a scripting language (e.g. Groovy and Python)
- An understanding of build artifacts and artifact management, bonus points for understanding security considerations of such
- Experience with functional testing frameworks such as Selenium a plus but not required
- BS in computer science or equivalent work experience
What the job involves
- As a member of the DevSecOps team, you will help with the development, deployment, integration, and scale of security services to support SAST, DAST, and SCA functions across ServiceNow
- You will support the security champions that use our services and continuously improve service delivery
- In addition, you will help build ServiceNow Apps for the Product Security team to support security activities at scale and make work, work better for engineers, IT developers, and operations
- Develop, deploy, integrate, and operate our security services (SAST, SCA, DAST). We own the end-to-end service. As a member of this team, you’ll help manage SAST automations, SCA integrations, and develop ServiceNow applications to initiate scan requests, automate workflows, and present clean findings. We back all of our services on Kubernetes, AWS, and the NOW cloud.
- Integrate vulnerability management services into build pipelines and the ServiceNow ALM platform.
- Support Security Champions Program relating to CI/CD integrations.
Our take
ServiceNow provides cloud-based solutions that define, structure, manage, and automate services for enterprise operations, transforming old, manual ways of working into modern digital workflows. The company was founded in 2004 with a vision to build a cloud-based platform that would enable regular people to route work effectively through the enterprise.
Much as Salesforce enables a company to manage its external clients by keeping a record of all contacts and interactions, ServiceNow promises an internal system to meet the needs of employees. It has succeeded in claiming half the market, setting itself apart from legacy IT service-management software players like BMC Software, Hewlett Packard Enterprise, Cherwell Software and CA Technologies.
The company's success comes from two product traits: simplicity and customisability. ServiceNow's IT tools don't require the IT department to set them up. Once running, they offer a single collection centre for requests, data points and checklists, all of which can in turn be analysed by algorithms to predict needs, flag concerns and measure efficiency.
The company has more than 7500 customers, including 80% of the Fortune 500 list of the United States' largest corporations. ServiceNow now looks to increase its revenue threefold in upcoming years and has entered into a 5-year partnership plan with Visa, beginning with the launch of a Visa-integrated dispute resolution solution for issuers. The company is prioritising organic growth over mergers and acquisitions, with a target revenue of $15 billion, something which its Visa partnership will no doubt aid in achieving.
Freddie
Company Specialist at Welcome to the Jungle
Insights
16% employee growth in 12 months
Company
Funding (last 2 of 6 rounds)
Mar 2012
$11m
GROWTH EQUITY VC
Feb 2012
$17.9m
GROWTH EQUITY VC
Total funding: $83.8m
Company benefits
- Commuter benefits
- Annual learning stipends
- Work from home opportunities
- Generous family leave
- Matched donations
- Flexible PTO
- 401(k) matching
- Paid volunteer time
Company HQ
Santa Clara, CA
Leadership
Fred Luddy
(Founder & Chairman Of The Board)Previously Software Developer at Amdahl Corporation for 4 years and CTO at Peregrine Systems for 13 years.
Share this job