Senior Security Incident Commander — Major Incident Response

Servicenow; Santa Clara (CA); On-site; USD 146,000 - 256,000; Full time

Benefits offered by this job

Health plans

401(k) plan with company match

Flexible spending accounts

ESPP

Matching donations

Flexible time away plan

Family leave programs

Job summary

ServiceNow is seeking an experienced Senior Security Incident Commander to join the Security Incident Command team. You will orchestrate incident response strategy and communications during critical information security events, guiding MSI preparedness and cross-region coordination.

You will own the response for high-priority incidents, mature documentation, and deliver executive briefings. This role emphasizes fast decision-making, playbook development, and collaboration with executives and

Qualifications

• Experience integrating AI into work processes, decision-making, or problem-solving.
• 8+ years of cybersecurity experience, or equivalent with education.
• 4–6+ years in incident response or incident management.
• Excellent verbal and written English communication.
• Ability to convey complex topics clearly to varied audiences.
• Strong problem-solving and decision-making skills.
• Ability to assess situations quickly and prioritize risks.
• Familiarity with MITRE ATT&CK framework.

Responsibilities

• Orchestrate response and remediation for high-severity security events.
• Lead response to critical incidents within the company.
• Develop and refinePlaybooks/procedures for security incident command.
• Prepare executive summaries and incident briefings for stakeholders.
• Conduct rapid response, mitigation, and investigations for top-priority cases.
• Coordinate globally with regional team members on response and investigations.
• Organize scenario-based exercises to improve incident management.
• Maintain and improve playbooks to standardize SIC responses.
• Support Post-Incident Reviews and Root Cause Analyses.

Skills

AI integration

Cybersecurity experience

Incident response

Communication skills

Technical communication

Problem solving

Situation assessment

MITRE ATT&CK

Security domain knowledge

Tabletop exercises

Job description

ServiceNow is seeking an experienced Senior Security Incident Commander to join the Security Incident Command team. You will orchestrate incident response strategy and communications during critical information security events, guiding MSI preparedness and cross-region coordination.

You will own the response for high-priority incidents, mature documentation, and deliver executive briefings. This role emphasizes fast decision-making, playbook development, and collaboration with executives and