Staff Security Engineer Security Configuration Management

Job Summary:

The ServiceNow Security Organization (SSO) delivers world-class, innovative security solutions to reduce risk and protect the company and our customers.

Role Overview:

The Security Configuration Management team ensures secure configuration across global environments by defining, monitoring, and improving configuration baselines.

• Lead the implementation and improvement of secure configuration baselines.
• Integrate and optimize scanning tools.
• Enhance and operate ServiceNow's SecOps Configuration Compliance workflows.
• Develop and refine risk-based prioritization and remediation models.
• Partner with product, platform, compliance, and security engineering teams.
• Support the strategic vision for AI-assisted configuration management.

Qualifications:

• 8+ Years Experience managing configuration compliance or vulnerability scanning tools.
• Strong knowledge of Linux/Unix and/or Mac/Windows operating systems and secure hardening principles.
• Programming or scripting proficiency.
• Hands-on experience with AWS, Azure, and/or Google Cloud environments.
• Experience with container platforms and related configuration/security considerations.
• Familiarity with CIS Benchmarks, STIGs, PCI, NIST, or other security configuration frameworks.
• Understanding of infrastructure vulnerabilities, risk assessment methods, and remediation priorities.
• Strong foundation in AI concepts.