Senior Security Engineer – ServiceNow Security & Threat Modelling

Senior Security Engineer – ServiceNow Security & Threat Modelling

What you get to do in this role :

• Drive security by design across ServiceNow GTM Product initiatives, delivering expert threat modelling and conducting security design reviews for new features, integrations, and enhancements.
• Own the implementation and continuous improvement of Secure Development Lifecycle (SDLC) practices, focusing on early detection and mitigation of risks through thorough threat modelling.
• Plan, execute, and maintain Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) across ServiceNow and all integrated components; champion automated security scanning and vulnerability triage.
• Deep-dive into scan results, perform risk analysis, and work cross-functionally to prioritize remediation, ensuring vulnerabilities are addressed in a timely and sustainable manner.
• Collaborate with engineering, devops, and platform teams to instill secure coding practices, delivering security education and best practice advice.
• Lead or contribute to risk assessments, vendor reviews, and architectural guidance for projects built on or integrated with ServiceNow.
• Document security findings, produce actionable reporting, and help track resolution of risks and vulnerabilities as part of ITIL-driven incident, problem, and change management processes.
• Mentor internal teams on modern security tools, processes, and emerging threats to continuously strengthen ServiceNow platform posture.
• Stay abreast of the latest security threats, research, and regulatory requirements to ensure compliance and protection of sensitive data.

Qualifications

Required Technical Qualifications

Preferred Qualifications (Nice to Have)