Senior Staff Information Security Engineer, ServiceNow

• Experience in leveraging or critically thinking about how to integrate AI into work processes, decision-making, or problem-solving. This may include using AI-powered tools, automating workflows, analyzing AI-driven insights, or exploring AI's potential impact on the function or industry
• Master’s degree in computer science; engineering, or information technology or equivalent industry experience
• 10+ years of relevant hands-on engineering experience
• Deep experience with operating system and server security (Linux, Windows)
• Advanced knowledge of enterprise networking and secure network architectures
• Proficiency in scripting and automation (Python, Bash, Go, etc.)

Desirable

• This position reports to the Director, Security Engineering
• The Enterprise Security Engineering team targets building state-of-the-art technology that will help reduce the risk surrounding the sensitive assets of the company with the least impact possible on operations, acts as guidance and facilitator to the security operations teams and helps shifting Security perception from blocker to enabler by building a relationship of trust with the other teams
• The Senior Staff Information Security Engineer will serve as a technical subject matter expert within the Infrastructure Security team, responsible for engineering solutions that secure ServiceNow’s core enterprise infrastructure
• This includes network, server, authentication systems, certificates, and operational tooling. You will drive strategic initiatives that prevent threats, reduce operational risk, and enhance resilience across infrastructure services
• Define and execute the technical strategy for securing infrastructure, aligned to risk and business needs
• Lead efforts to harden network and server infrastructure against unauthorized access, misconfigurations, and malware
• Architect and implement scalable and automated security controls across authentication, system configurations, and monitoring pipelines
• Drive secure deployment and management of on-prem containerized environments (e.g., Kubernetes)
• Establish controls and visibility to manage certificate lifecycle and prevent expiration-related risks
• Champion operational excellence through automation, outage reduction, and service resilience improvements
• Represent Infrastructure Security in architecture reviews, incident response, and compliance initiatives
• Mentor and develop other engineers, influencing secure engineering practices across teams
• Stay current with industry threats, trends, and mitigation techniques related to infrastructure security