The Senior Application Security Engineer role at ServiceNow is an onsite position based in Mountain View, CA, centered on safeguarding AI infrastructure, platform components, and features. The role drives design reviews, threat modeling and security assessments while partnering with ML, search, product, infrastructure, data, and frontend teams to deliver secure, scalable solutions.
Responsibilities
- Lead security reviews by actively participating in design discussions and data handling assessments to embed security considerations from the outset.
- Perform targeted penetration tests as part of security reviews for critical features; identify vulnerabilities and propose mitigations; refine testing approaches to reliably uncover and address risks.
- Develop and maintain AppSec processes and CI/CD scanning tools to ensure vulnerability identification and remediation remain current and effective.
- Contribute to the ongoing enhancement of the AppSec program with a focus on achieving meaningful security outcomes.
- Collaborate with cross-functional teams including machine learning, search, product, infrastructure, data, and frontend to architect secure solutions.
- Empower teams with guidance and training to make security-informed decisions.
Requirements
- 5+ years of experience in application security, including risk identification, mitigation planning, and implementing security features and solutions.
- 3+ years of experience conducting penetration testing.
- 2+ years with SAST, DAST, dependency scanning and vulnerability management tools such as Snyk, GitHub Dependabot, and Burp Suite.
- 2+ years of hands-on experience with modern programming languages such as Python or Golang (or equivalents).
- Hands-on cloud security experience following cloud-native security best practices across AWS, GCP, and/or Azure.
- In-depth knowledge of application and network security, authentication and authorization, identity systems, encryption, AI/LLM security, and secure coding practices.
- BS+ in computer science or a related field, or equivalent relevant experience.
Technologies
- Python
- Golang
- Snyk
- GitHub Dependabot
- Burp Suite
- AWS
- GCP
- Azure
- SAST
- DAST
Work Personas
ServiceNow supports a flexible work model that may be categorized as flexible, remote, or in-office, depending on role requirements and location. Eligibility for a work persona may involve confirming the distance to the nearest ServiceNow office using a third-party service.
Equal Opportunity Employer
ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status, or any other category protected by law. Applicants with arrest or conviction records will be considered in accordance with applicable legal requirements.
Accommodations
We strive to provide an accessible and inclusive candidate experience. If you require a reasonable accommodation to complete any part of the application process, or need an alternative method to apply, please contact globaltalentss@servicenow.com for assistance.
Export Control Regulations
For positions requiring access to controlled technology subject to export control regulations, including the U S Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities.
