Senior Application Security Engineer

Responsibilities

• Lead security reviews by actively participating in design discussions and data handling assessments to embed security considerations from the outset.
• Perform targeted penetration tests as part of security reviews for critical features; identify vulnerabilities and propose mitigations; refine testing approaches to reliably uncover and address risks.
• Develop and maintain AppSec processes and CI/CD scanning tools to ensure vulnerability identification and remediation remain current and effective.
• Contribute to the ongoing enhancement of the AppSec program with a focus on achieving meaningful security outcomes.
• Collaborate with cross-functional teams including machine learning, search, product, infrastructure, data, and frontend to architect secure solutions.
• Empower teams with guidance and training to make security-informed decisions.

Requirements

• 5+ years of experience in application security, including risk identification, mitigation planning, and implementing security features and solutions.
• 3+ years of experience conducting penetration testing.
• 2+ years with SAST, DAST, dependency scanning and vulnerability management tools such as Snyk, GitHub Dependabot, and Burp Suite.
• 2+ years of hands-on experience with modern programming languages such as Python or Golang (or equivalents).
• Hands-on cloud security experience following cloud-native security best practices across AWS, GCP, and/or Azure.
• In-depth knowledge of application and network security, authentication and authorization, identity systems, encryption, AI/LLM security, and secure coding practices.
• BS+ in computer science or a related field, or equivalent relevant experience.

Technologies

• Python
• Golang
• Snyk
• GitHub Dependabot
• Burp Suite
• AWS
• GCP
• Azure
• SAST
• DAST

Work Personas

ServiceNow supports a flexible work model that may be categorized as flexible, remote, or in-office, depending on role requirements and location. Eligibility for a work persona may involve confirming the distance to the nearest ServiceNow office using a third-party service.

Equal Opportunity Employer

ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status, or any other category protected by law. Applicants with arrest or conviction records will be considered in accordance with applicable legal requirements.

Accommodations

We strive to provide an accessible and inclusive candidate experience. If you require a reasonable accommodation to complete any part of the application process, or need an alternative method to apply, please contact [email protected] for assistance.

Export Control Regulations

For positions requiring access to controlled technology subject to export control regulations, including the U S Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities.