Staff Application Security Engineer – ServiceNow Instance Security

This is a fully remote position, open to applicants in California.

📋 Description

• Evaluate ServiceNow instance configurations against security baselines and detect misconfigurations that affect confidentiality, integrity, or availability.

• Create and sustain detailed instance-hardening guidelines that encompass authentication, access controls, encryption, logging, monitoring, and operational security.

• Convert security requirements and risks into straightforward, customer-friendly remediation suggestions.

• Recognize recurring misconfiguration trends and promote systemic enhancements through guidance, tools, and checks.

• Assess, confirm, and contextualize security issues reported by customers related to instance configuration or deployment practices.

• Differentiate between product vulnerabilities and configuration problems, documenting their impacts and remediation strategies.

• Collaborate with Product Security, Engineering, and other Security teams on complex or significant findings.

• Assist with escalations and high-profile customer interactions as an authority on instance security.

• Own intricate instance-security challenges and shape how GSSC AppSec scales instance-security guidance and improves posture globally.

⛳️ Requirements

• Experience in utilizing or critically assessing how to incorporate AI into work processes, decision-making, or problem-solving.

• Over 8 years of robust experience in application security, encompassing vulnerability analysis, secure design principles, and a threat modeling mindset, or equivalent experience through education.

• Capability to read, write, and debug code to validate findings and comprehend security implications.

• Proven experience in translating security risks into practical remediation recommendations.

• Exceptional written and verbal communication skills, particularly for customer-facing or executive-level content.

• Practical experience with the ServiceNow platform, particularly its security features, configuration, and administration.

• Knowledge of SaaS security posture management and misconfiguration risks.

• Previous experience in supporting customer-reported security issues, escalations, or external security assessments.

• Ability to influence security outcomes without direct authority through collaborative efforts across functions.

🏝️ Benefits

• Equity (when applicable).

• Health plans, including flexible spending accounts.

• 401(k) Plan with company match.

• Employee Stock Purchase Plan (ESPP).

• Matching donations.

• Flexible time away plan.

• Family leave programs.

• Full relocation costs covered to West Palm Beach, Florida (WPB).