Staff Applied Security Engineer

ServiceNow•Santa Clara, CA

22h

About The Position

The Architecture Consulting & Engineering Services (ACES) team is a security-focused consulting and engineering organization that partners with ServiceNow’s largest and most highly regulated customers. The team helps security organizations understand, evaluate, and securely adopt the ServiceNow platform, AI capabilities, and emerging technologies through technical guidance, security architecture expertise, threat modeling, reference architectures, and customer-facing security engineering. The Staff Applied Security Engineer is a hands-on security practitioner who works directly with large organizations, including major financial services and healthcare institutions. The role analyzes cloud-native architectures and distributed systems, validates security controls, conducts threat modeling, and provides practical architectural guidance to customer security teams, architects, engineers, CISOs, and executives. It bridges Security, Product, Engineering, and Customer Success to support platform adoption while helping customers meet security, compliance, and risk-management objectives. The role also contributes to product direction and engineering roadmaps, develops scalable security artifacts and architectures, and helps define secure deployment patterns for emerging AI capabilities, including agents, model integrations, governance controls, and data protection mechanisms.

Requirements

At least 5 years of hands-on experience in security engineering, security architecture, cloud security, application security, product security, or related disciplines.
Strong understanding of identity and access management; authentication and authorization; network security; cryptography and key management; data protection and privacy; security monitoring and incident response; and secure software development.
Experience assessing and securing cloud-native architectures.
Strong knowledge of Kubernetes, container security, service-to-service communications, workload isolation, and modern application deployment patterns.
Experience with at least one major cloud provider: AWS, Microsoft Azure, or Google Cloud Platform.
Experience conducting threat modeling using frameworks such as STRIDE, ATT&CK, PASTA, or similar methodologies.
Ability to build and communicate architecture diagrams that clearly articulate data flows, trust boundaries, security controls, and deployment models.
Strong written and verbal communication skills, including the ability to engage audiences from engineers to CISOs.
Experience presenting security recommendations and architectural guidance to customers and executive stakeholders.
Curiosity and willingness to continuously learn about emerging technologies, including AI, cloud-native platforms, and modern security architectures.

Nice To Haves

Experience supporting Fortune 500 or highly regulated enterprise customers.
Experience working with financial services, healthcare, or public sector organizations.
Knowledge of AI security, AI governance, model risk management, prompt injection risks, agentic systems, and emerging AI threats.
Experience using AI technologies to improve security operations, threat detection, security analysis, or engineering productivity.
Familiarity with JavaScript, scripting, or automation development.
Experience with the ServiceNow platform.
Experience developing security reference architectures, implementation patterns, or technical guidance consumed at scale.
Industry certifications such as CISSP, CCSP, AWS Security Specialty, Azure Security Engineer, GSEC, GIAC, OSCP, or equivalent.

Responsibilities

Partner with customer security, architecture, engineering, risk, compliance, and executive stakeholders to address security concerns and accelerate platform adoption.
Develop customer-facing security reference architectures covering trust boundaries, data flows, identity models, encryption controls, and shared responsibility models.
Perform threat modeling for ServiceNow products, AI services, integrations, and customer deployment architectures.
Analyze security architectures across cloud-native and distributed systems environments.
Lead security deep dives covering networking, identity, encryption, data protection, application security, and AI security controls.
Evaluate customer security requirements and map them to ServiceNow platform capabilities and industry best practices.
Work with Product Management, Engineering, Product Security, and Architecture teams to identify capability gaps and advocate for customer-driven improvements.
Build scalable artifacts such as architecture patterns, deployment guides, implementation accelerators, technical whitepapers, detection content, and security design documentation.
Assess integrations involving AI, cloud services, APIs, Kubernetes environments, data platforms, and third-party technologies.
Help define secure deployment patterns for emerging AI capabilities, including agents, model integrations, governance controls, and data protection mechanisms.
Represent ServiceNow security architecture and best practices in customer workshops, architecture reviews, executive briefings, and security assessments.