Senior Staff Software Engineer, ServiceNow

• Experience in leveraging or critically thinking about how to integrate AI into work processes, decision-making, or problem-solving. This may include using AI-powered tools, automating workflows, analyzing AI-driven insights, or exploring AI’s potential impact on the function or industry
• 12+ years of professional software engineering experience, including systems you have operated in production and not just shipped. OR SIMILAR EXPERIENCE WITH EDUCATION
• Expert-level Python: data processing at scale, API development, and real testing discipline in a production codebase
• Deep hands-on Splunk experience. SPL, data onboarding and normalization, search performance tuning, and working with the Splunk APIs
• Software architecture ownership on distributed or data-intensive systems. You have defined service and API boundaries, documented the tradeoffs, and revised a design when the requirements moved
• A real cybersecurity background: security operations, detection engineering, threat detection, incident response, or security data engineering. You should know how security telemetry gets produced and consumed, and be comfortable with frameworks like MITRE ATT&CK
• Project ownership at a senior IC level. You have taken an initiative from a vague problem statement to a delivered result, worked across team boundaries to do it, and kept engineering leadership informed without needing to be managed through it

Desirable

• Our security teams pull data from a lot of separate systems
• Asset inventory, identity governance, detection tooling, and threat intel all live in different places, so answering a basic question like which systems an attacker could reach from a compromised account can take a security analyst most of a day
• We're building a platform that connects those systems behind a shared API and knowledge layer so those questions can be answered in seconds
• We are not replacing the source systems or copying their data
• You would be a senior individual contributor on a small team, responsible for whole areas of the platform: designing the API contracts, building the services behind them, getting them into production, and working with partner teams to actually adopt them
• This is a hands-on role
• You will write code, define interfaces other teams build against, and work directly with stakeholders in detection engineering, red team, blue team, and identity and asset management
• Design and build the platform's core APIs, covering context retrieval, risk scoring, entity resolution, data contracts, and coverage queries
• Build and run asynchronous data pipelines on a message bus with a governed schema registry
• Integrate security data sources including SIEM, identity governance, asset inventory, and our knowledge graph
• Own platform workstreams from scoping through delivery, including the cross-team coordination that takes
• Write design proposals and review other people's, as part of the platform's RFC process
• Review code, mentor engineers on partner teams who contribute to the platform, and keep the technical documentation usable