Staff Applied Security Engineer

Servicenow; Santa Clara (CA); Hybrid; USD 140,000 - 190,000; Full time

Job summary

ServiceNow ACES is seeking an Applied Security Engineer to dive deep into cloud-native architectures, perform threat modeling, and translate security concepts into actionable design guidance. You will partner with product and security teams to help Fortune 500 customers securely adopt ServiceNow platform capabilities, AI services, and cloud technologies.

The role demands hands-on security expertise across cloud providers, Kubernetes, and modern deployment patterns, with strong communication to

Qualifications

• 5+ years in security engineering or security architecture.
• Experience securing cloud-native architectures (AWS/Azure/GCP).
• Proven threat modeling using STRIDE/ATT&CK/PASTA.
• Ability to translate security concepts into practical designs.

Responsibilities

• Partner with security, architecture, risk, and exec stakeholders to accelerate adoption.
• Develop security reference architectures with trust boundaries and data flows.
• Perform threat modeling for ServiceNow products and AI services.
• Analyze security across cloud-native and distributed systems.
• Lead deep dives into networking, identity, encryption, and data protection.
• Create scalable deployment guides and security design docs.
• Assess AI, cloud services, APIs, and Kubernetes integrations.

Skills

Cloud security

Security architecture

Threat modeling

Kubernetes security

AI security

Stakeholder communication

Security engineering

Identity & access management

Cryptography & key management

Education

Bachelor's degree in CS or related field

Tools

AWS

Azure

GCP

Kubernetes

Job description

It all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could do that for everyone—freeing people from busywork so they could focus on meaningful work. Today, ServiceNow is the AI control tower for business reinvention. Our ServiceNow AI platform brings together any AI, any data, and any workflow— helping 85% of the Fortune 500® work smarter, faster, and better. We're building an AI-native culture where technology and talent are unstoppable together. And we're just getting started.

Join us to put AI to work for people.

Job Description

The Team

The Architecture Consulting & Engineering Services (ACES) team is a security-focused consulting and engineering organization that partners with many of ServiceNow's largest and most highly regulated customers. We help security teams understand, evaluate, and securely adopt the ServiceNow platform, AI capabilities, and emerging technologies.

Our mission is to establish ServiceNow as a trusted security partner by delivering deep technical guidance, security architecture expertise, threat modeling, reference architectures, and customer‑facing security engineering engagement. We operate at the intersection of Security, Product, Engineering, and Customer Success to accelerate platform adoption while ensuring customers can meet their security, compliance, and risk‑management objectives.

The Role

We are seeking an experienced Applied Security Engineer to join the ACES team.

This is not a traditional consulting role, nor is it a traditional product security role. We are looking for a hands‑on security practitioner who can dive deep into cloud‑native architectures, analyze distributed systems, validate security controls, conduct threat modeling exercises, and communicate effectively with customer security teams, architects, engineers, CISOs, and executives.

You will work directly with Fortune 500 organizations, including some of the world's largest financial services and healthcare institutions, helping them securely adopt ServiceNow platform capabilities, AI solutions, cloud services, and emerging technologies.

Success in this role requires technical depth, customer credibility, and the ability to translate complex security concepts into practical architectural guidance.

What You Get To Do In This Role

• Partner directly with customer security, architecture, engineering, risk, compliance, and executive stakeholders to address security concerns and accelerate platform adoption.
• Develop customer‑facing security reference architectures that clearly articulate trust boundaries, data flows, identity models, encryption controls, and shared responsibility models.
• Perform threat modeling exercises for ServiceNow products, AI services, integrations, and customer deployment architectures.
• Analyze security architectures across cloud‑native and distributed systems environments.
• Lead security deep dives covering networking, identity, encryption, data protection, application security, and AI security controls.
• Evaluate customer security requirements and map them to ServiceNow platform capabilities and industry best practices.
• Work closely with Product Management, Engineering, Product Security, and Architecture teams to identify capability gaps and advocate for customer‑driven improvements.
• Build scalable artifacts including architecture patterns, deployment guides, implementation accelerators, technical whitepapers, detection content, and security design documentation.
• Assess integrations involving AI, cloud services, APIs, Kubernetes environments, data platforms, and third‑party technologies.
• Help define secure deployment patterns for emerging AI capabilities including agents, model integrations, governance controls, and data protection mechanisms.

Represent ServiceNow security architecture and best practices during customer workshops, architecture reviews, executive briefings, and security assessments.

Qualifications

To Be Successful In This Role You Have

• 5+ years of hands‑on experience in security engineering, security architecture, cloud security, application security, product security, or related disciplines.
• Strong understanding of core security principles including identity and access management; authentication and authorization; network security; cryptography and key management; data protection and privacy; security monitoring and incident response; and secure software development.
• Experience assessing and securing cloud‑native architectures.
• Strong knowledge of Kubernetes, container security, service‑to‑service communications, workload isolation, and modern application deployment patterns.
• Experience with one or more major cloud providers: Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform (GCP).
• Experience conducting threat modeling using frameworks such as STRIDE, ATT&CK, PASTA, or similar methodologies.
• Ability to build and communicate architecture diagrams that clearly articulate data flows, trust boundaries, security controls, and deployment models.
• Strong written and verbal communication skills with the ability to engage audiences ranging from engineers to CISOs.
• Experience presenting security recommendations and architectural guidance to customers and executive stakeholders.
• A curious mindset and willingness to continuously learn emerging technologies including AI, cloud‑native platforms, and modern security architectures.

Preferred Qualifications

• Experience supporting Fortune 500 or highly regulated enterprise customers.
• Experience working with financial services, healthcare, or public sector organizations.
• Knowledge of AI security, AI governance, model risk management, prompt injection risks, agentic systems, and emerging AI threats.
• Experience using AI technologies to improve security operations, threat detection, security analysis, or engineering productivity.
• Experience with the ServiceNow platform.
• Experience developing security reference architectures, implementation patterns, or technical guidance consumed at scale.
• Industry certifications such as CISSP, CCSP, AWS Security Specialty, Azure Security Engineer, GSEC, GIAC, OSCP, or equivalent.

Why This Role Is Unique

This role sits at the intersection of customer engagement, security engineering, cloud architecture, and AI security. You'll help some of the world's largest organizations make security decisions that directly influence platform adoption, AI strategy, and enterprise risk management.

You'll have the opportunity to shape product direction, influence engineering roadmaps, develop industry‑leading security architectures, and help define how ServiceNow brings secure AI and cloud‑native innovation to the world's most demanding customers.

Additional Information

We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here . To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third‑party service.

Equal Opportunity Employer

ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, gender identity, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements.

Accommodations

We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact [e-mail] for assistance.

Export Control Regulations

For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities.

By clicking the link above or any third‑party link within this posting, you are leaving this site and going to a third‑party website where the third‑party website's terms and privacy policy apply