ServiceNow
Staff Applied Security Engineer
Santa Clara, CALIFORNIA, United States · Hybrid · Staff · Full-time · Posted Oct 15, 2026
- Experience
- 5+ years; applicable disciplines include security engineering, security architecture, cloud security, application security, product security, or related fields.
- Visa sponsorship
- For positions requiring access to controlled technology subject to export control regulations, employment is contingent on obtaining any required export license or other government approval.
About the job
Provides hands-on security architecture and engineering guidance to enterprise customers adopting ServiceNow’s platform, cloud services, and AI capabilities.
What you'll do
- Partner with customer and internal teams to address security concerns and accelerate platform adoption.
- Develop security reference architectures and conduct threat modeling and security assessments for products, AI services, integrations, and customer deployments.
- Assess cloud-native and distributed-system architectures, and create reusable security patterns, deployment guidance, and documentation.
What they ask for
- 5+ years of hands-on experience in security engineering, security architecture, cloud security, application security, product security, or a related discipline.
- Experience assessing and securing cloud-native architectures, with knowledge of Kubernetes and container security.
- Experience with at least one major cloud provider: Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform (GCP).
- Experience conducting threat modeling using STRIDE, ATT&CK, PASTA, or similar methodologies.
Nice to have
- Experience supporting Fortune 500 or highly regulated customers, including financial services, healthcare, or public sector organizations.
- Knowledge of AI security and governance, or familiarity with JavaScript, scripting, automation, or the ServiceNow platform.
Tools
Kubernetes, Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), STRIDE, ATT&CK, PASTA, JavaScript
AI focus
Helps customers securely adopt AI capabilities; threat-models AI services and integrations; defines secure deployment patterns for AI agents and model integrations, including governance and data protection controls.
Model-written summary · the original posting is authoritative