Staff Applied Security Engineer

ServiceNow's Architecture Consulting & Engineering Services (ACES) team as a Staff Applied Security Engineer. In this role, you will work directly with Fortune 500 organizations, helping them securely adopt the ServiceNow platform, AI solutions, cloud services, and emerging technologies. You will partner with customer security, architecture, engineering, risk, compliance, and executive stakeholders to address security concerns and accelerate platform adoption. This position requires technical depth, customer credibility, and the ability to translate complex security concepts into practical architectural guidance.

Responsibilities

• Partner directly with customer security, architecture, engineering, risk, compliance, and executive stakeholders to address security concerns and accelerate platform adoption.
• Develop customer-facing security reference architectures that clearly articulate trust boundaries, data flows, identity models, encryption controls, and shared responsibility models.
• Perform threat modeling exercises for ServiceNow products, AI services, integrations, and customer deployment architectures.

Requirements

• Strong written and verbal communication skills with the ability to engage audiences ranging from engineers to CISOs
• Ability to build and communicate architecture diagrams that clearly articulate data flows, trust boundaries, security controls, and deployment models
• A curious mindset and willingness to continuously learn emerging technologies including AI, cloud-native platforms, and modern security architectures

Experience with the ServiceNow platform

• Experience presenting security recommendations and architectural guidance to customers and executive stakeholders
• 5+ years of hands-on experience in security engineering, security architecture, cloud security, application security, product security, or related disciplines
• Strong knowledge of Kubernetes, container security, service-to-service communications, workload isolation, and modern application deployment patterns
• Experience with one or more major cloud providers: Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform (GCP)
• Knowledge of AI security, AI governance, model risk management, prompt injection risks, agentic systems, and emerging AI threats
• Experience assessing and securing cloud-native architectures
• Experience developing security reference architectures, implementation patterns, or technical guidance consumed at scale

Preferred

• Experience supporting Fortune 500 or highly regulated enterprise customers

Familiarity with JavaScript, scripting, or automation development

• Experience conducting threat modeling using frameworks such as STRIDE, ATT&CK, PASTA, or similar methodologies
• Strong understanding of core security principles including identity and access management; authentication and authorization; network security; cryptography and key management; data protection and privacy; security monitoring and incident response; and secure software development
• Experience using AI technologies to improve security operations, threat detection, security analysis, or engineering productivity
• Experience working with financial services, healthcare, or public sector organizations
• Industry certifications such as CISSP, CCSP, AWS Security Specialty, Azure Security Engineer, GSEC, GIAC, OSCP, or equivalent