Product Security Engineer | DevSecOps

Company Description

It all started in sunny San Diego, California in 2004 when a visionary engineer, Fred Luddy, saw the potential to transform how we work. Fast forward to today — ServiceNow stands as a global market leader, bringing innovative AI-enhanced technology to over 8,100 customers, including 85% of the Fortune 500®. Our intelligent cloud-based platform seamlessly connects people, systems, and processes to empower organizations to find smarter, faster, and better ways to work. But this is just the beginning of our journey. Join us as we pursue our purpose to make the world work better for everyone.

Job Description

**PLEASE NOTE:  This role requires to be in the San Diego or Chicago ServiceNow offices 2 days per week minimum.**

 

The ServiceNow Security Organization (SSO)  

The ServiceNow Security Organization (SSO) delivers world-class, innovative security solutions to reduce risk and protect the company and our customers. We enable our customers to migrate their most sensitive data and workloads to the cloud, accelerating our business so that we are the most trusted SaaS provider. We create an environment where our employees are proud to work and can make a positive impact    

Team 

Product Security is shifting everywhere and enabling ServiceNow engineers to build-in security throughout the SSDL.  The DevSecOps team builds, integrates, and maintains security services to help ServiceNow simplify security activities for thousands of internal customers.    

Role: 

As a member of the DevSecOps team, you will help with the deployment, integration, and maintenance of tools to support SAST, DAST, SCA, and Enterprise Container Security functions across ServiceNow.  In addition, you will help support, maintain, upgrade, and improve the tooling used. 

You will work closely with engineering teams to deploy and maintain scalable containerized system images for application security toolchains. 

What you get to do in this role: 

• Maintain and support critical security testing tools 

• Work with many different technologies from tools to cloud services  

• Support DevSecOps Engineering services  

• Work on a wide range of technologies 

Qualifications

To be successful in this role you have: 

• 2+ years of experience working in a development operations environment.   

• Focus is on security tools and ensuring the operating effectiveness. 

• Participated in software engineering tasks across entire lifecycle of an application or feature, including design, development, testing, and deployment 

• Worked with their team and adjacent teams to solve problems.   

• 1+ year of experience working with:

  • SAST and DAST testing tools such as Fortify or Venari. 

• 1+ year of experience working with Cloud Native technologies 

  • Containers: Kubernetes 

  • Operations tools: Prometheus, ELK, Grafana  

• 1+ year of scripting experience 

  • Groovy and Python 

• Knowledge of static application security testing, dynamic application security testing, and software composition analysis tool chains  

• BS in computer science or equivalent work experience 

 

#SecurityJobs 

Not sure if you meet every qualification? We still encourage you to apply! We value inclusivity, welcoming candidates from diverse backgrounds, including non-traditional paths. Unique experiences enrich our team, and the willingness to dream big makes you an exceptional candidate! 

 

Compensation is based on the geographic location in which the role is located and is subject to change based on work location.

 

For positions in this location, we offer a base pay of $123,500 to $191,500, plus equity (when applicable), variable/incentive compensation and benefits. Sales positions generally offer a competitive On Target Earnings (OTE) incentive compensation structure. Please note that the base pay shown is a guideline, and individual total compensation will vary based on factors such as qualifications, skill level, competencies, and work location. We also offer health plans, including flexible spending accounts, a 401(k) Plan with company match, ESPP, matching donations, a flexible time away plan and family leave programs. 

 

Compensation is based on the geographic location in which the role is located and is subject to change based on work location.

Additional Information

Work Personas

We