Staff AppSec Engineer - ServiceNow Instance Security Remote

Servicenow; Santa Clara (CA); On-site; USD 176,000 - 308,000; Full time

Benefits offered by this job

Relocation assistance

Health plans

401(k) with company match

Job summary

ServiceNow is seeking a Staff Application Security Engineer within the GSSC AppSec team to secure ServiceNow instances, identify configuration-driven risks, validate customer-reported findings, and guide remediation. This hands-on role blends app security with deep platform knowledge and will scale guidance globally.

The role emphasizes independent work at senior levels, cross‑functional collaboration, and direct customer interactions while supporting a flexible/remote work model in a large,

Qualifications

• Experience integrating AI into security workflows or decision making.
• 8+ years of strong foundation in application security or equivalent.
• Ability to read, write, and debug code to validate findings.
• Translate security risk into actionable remediation guidance.
• Excellent written and verbal communication for customer-facing content.

Responsibilities

• Secure ServiceNow instances by identifying configuration-driven risks.
• Develop prescriptive instance-hardening guidance on auth, access, encryption, logging, and monitoring.
• Translate security requirements into customer-ready recommendations.
• Triage and contextualize customer findings related to instance configuration.
• Collaborate with Product Security, Engineering, and other teams to resolve findings.

Skills

Application security

Code reading/writing

Communication skills

AI in security

Job description

ServiceNow is seeking a Staff Application Security Engineer within the GSSC AppSec team to secure ServiceNow instances, identify configuration-driven risks, validate customer-reported findings, and guide remediation. This hands-on role blends app security with deep platform knowledge and will scale guidance globally.

The role emphasizes independent work at senior levels, cross‑functional collaboration, and direct customer interactions while supporting a flexible/remote work model in a large,