Senior Staff Product Security Engineer

4 months ago

Madison, United States ServiceNow Full time
Company Description

At ServiceNow, our technology makes the world work for everyone, and our people make it possible. We move fast because the world can’t wait, and we innovate in ways no one else can for our customers and communities. By joining ServiceNow, you are part of an ambitious team of change makers who have a restless curiosity and a drive for ingenuity. We know that your best work happens when you live your best life and share your unique talents, so we do everything we can to make that possible. We dream big together, supporting each other to make our individual and collective dreams come true. The future is ours, and it starts with you. 

With more than 7,700+ customers, we serve approximately 85% of the Fortune 500®, and we're proud to be one of FORTUNE 100 Best Companies to Work For® and World's Most Admired Companies™.

Learn more on Life at Now blog and hear from our employees about their experiences working at ServiceNow.

Unsure if you meet all the qualifications of a job description but are deeply excited about the role? We still encourage you to apply At ServiceNow, we are committed to creating an inclusive environment where all voices are heard, valued, and respected. We welcome all candidates, including individuals from non-traditional, varied backgrounds, that might not come from a typical path connected to this role. We believe skills and experience are transferrable, and the desire to dream big makes for great candidates.

Job Description

About Digital Technology & The SSO  

We’re not yesterday’s IT department, we're Digital Technology. The world around us keeps changing and so do we. We’re redefining what it means to be IT with a mindset centered on transformation, experience, AI-driven automation, innovation, and growth.    

We’re all about delivering delightful, secure customer and employee experiences that accelerate ServiceNow’s journey to become the defining enterprise software company of the 21st century. And we love co-creating, using, and highlighting our own products to do it.     

Ultimately, we strive to make the world work better for our employees and customers when you work in ServiceNow Digital Technology, you work for them.     

The ServiceNow Security Organization (SSO) delivers world-class, innovative security solutions to reduce risk and protect the company and our customers. We enable our customers to migrate their most sensitive data and workloads to the cloud, accelerating our business so that we are the most trusted SaaS provider. We create an environment where our employees are proud to work and can make a positive impact   

Role  

As a Senior Staff Product Security Engineer on the ServiceNow SSDL team, you will collaborate with developers and software architects on highly technical solutions and help the organization build secure and resilient software. You will be threat modeling software products and services to identify potential risk and participate in architectural reviews of products in development.    

A key part of this position is to ensure the continued success of a large and growing security champions program. You will help mentor security champions and assist them in secure software design. As a Senior Staff Product Security Engineer, you will help security champions be successful. 

What you get to do in this role: 

  • Work on a wide range of technologies 

  • Work on complex architectural and technical challenges 

  • Participate in threat modeling activities 

  • Mentor and collaborate with development teams to adopt secure coding practices 

  • Work on strategic and highly visible security activities across the organization 

  • Be an advocate for security and participate in a security champions program 

Qualifications

To be successful in this role, we need someone who has: 

  • 10+ years of experience in software security (AppSec) 

  • 6+ years of experience in threat modeling software applications and services 

  • Expert-level knowledge in threat modeling methodologies such as STRIDE or PASTA and their applied use in fast-moving, iterative development lifecycles 

  • Expert-level knowledge of common web application vulnerabilities (OWASP Top 10) 

  • Developer-level proficiency in one or more languages - Python, Java, JavaScript, and Golang preferred 

  • Working knowledge of Machine Learning and taxonomies such as BIML that categorize known attacks on machine learning models 

  • In-depth knowledge of software design patterns and their security considerations 

  • Expertise in authentication and authorization standards including OAuth, OIDC, SAML, JWT, and PASETO 

  • Knowledge of symmetric and asymmetric cryptography, digital signatures, PKI, TLS, and cryptographic hash functions 

  • Knowledge of cloud native technologies including containers, Kubernetes, and services provided by AWS, GCP, and Azure 

  • Knowledge of static analysis (SAST), dynamic analysis (DAST), and software composition analysis (SCA) security tools 

  • Knowledge of OWASP ASVS, SCVS, and related verification standards 

  • Ability to work collaboratively in a highly distributed team 

  • Ability to communicate technical concepts to business stakeholders 

  • A passion for security 

 

#DTjobs  

#SecurityJobs 

Additional Information

ServiceNow is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status or any other category protected by law.

At ServiceNow, we lead with flexibility and trust in our distributed world of work. Click here to learn about our work personas: flexible, remote and required-in-office.

If you require a reasonable accommodation to complete any part of the application process, or are limited in the ability or unable to access or use this online application process and need an alternative method for applying, you may contact us at talent.acquisition@servicenow.com for assistance.

For positions requiring access to technical data subject to export control regulations, including Export Administration Regulations (EAR), ServiceNow may have to obtain export licensing approval from the U.S. Government for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by the U.S. Government.

Please Note: Fraudulent job postings/job scams are increasingly common. Click here to learn what to watch out for and how to protect yourself. All genuine ServiceNow job postings can be found through the ServiceNow Careers site.

 

From Fortune. © 2022 Fortune Media IP Limited All rights reserved. Used under license.

Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of, ServiceNow.

  • Senior Product Engineer

    1 month ago

    Madison, United States Science Solutions Recruitment Ltd Full time

    Senior Product Engineer An exciting new opportunity has arisen for a Senior Product Engineer at a leading printing manufacturer based in Hampshire. As Senior Product Engineer, you will be responsible for managing the New Product Introduction frameworks to introduce new designs and product improvements. You will also be responsible for leading Value Analysis...

  • Product Security Test Engineer

    4 months ago

    Madison, United States Verve Industrial Protection Full time

    Job DescriptionJob DescriptionVerve, a Rockwell Automation Company, is on a mission to secure the world's critical infrastructure providers by bringing the tools and techniques of defense-in-depth strategies employed by best-in-breed IT practices to OT (Operational Technology).We're a team of software developers, controls engineers, product managers,...

  • Product Security Test Engineer

    2 months ago

    Madison, United States Verve Industrial Protection Full time

    Job DescriptionJob DescriptionVerve, a Rockwell Automation Company, is on a mission to secure the world's critical infrastructure providers by bringing the tools and techniques of defense-in-depth strategies employed by best-in-breed IT practices to OT (Operational Technology).We're a team of software developers, controls engineers, product managers,...

  • Senior Product Security Engineer

    2 weeks ago

    Madison, Wisconsin, United States ServiceNow Full time

    Company OverviewServiceNow stands as a premier technology organization committed to enhancing the world for everyone. Our mission is fueled by innovation and a desire to foster positive transformations in the lives of our clients. Our diverse team of skilled professionals collaborates to reach our ambitious objectives and aspirations. We invite you to join...

  • Chief Engineer

    1 week ago

    Madison, United States SAIC Full time

    DescriptionSAIC is actively seeking aChief Engineer to support the UVC program in Huntsville, AL.The qualified candidate will perform Chief Engineering activities related to the Uncrewed Vehicle Control (UVC) program and will provide technical leadership for day-to-day operations, planning, direction, and coordination of product engineering efforts. This...

  • Senior Mechanical Engineer

    1 month ago

    Madison, United States Aeropeople Ltd Full time

    Job Title: Senior Mechanical Engineer Salary: up to £55,200 per annum dependent upon experience Location: Portsmouth We currently have a vacancy to join one of the world’s leading, global defence, security and aerospace companies as a Senior Mechanical Engineer. The role will be based in Portsmouth but offers the opportunity for hybrid working and...

  • IT Security Engineer II

    3 weeks ago

    Madison, United States GCR Professional Services Full time

    IT Security Engineer II (Full-time Direct-hire position, located onsite at the Marshall Space Flight Center in Huntsville, AL) Job Description: A successful candidate will serve as an Enterprise Security Infrastructure Engineer for firewalls, web content filtering, VPN, IPS, and proxy services on the NASA AEGIS contract. The engineer will design enterprise...

  • Staff UX Product Designer

    5 days ago

    Madison, Wisconsin, United States CRIBL INC Full time

    About Cribl Inc.Cribl Inc. is a serious company that doesn't take itself too seriously. We're a remote-first organization that believes in empowering our employees to do their best work, wherever they are. Our mission is to simplify the complexity of data management and enable our users to gain actionable insights efficiently.Job SummaryWe're seeking an...

  • Senior Packaging Engineering Manager

    3 weeks ago

    Madison, Wisconsin, United States Logic Engagement Full time

    Job Title: Senior Packaging Engineering ManagerLocation: GlasgowContract Duration: 12 monthsClient Overview: Leading global FMCG organizationLogic Engagements is in search of a Senior Packaging Engineering Manager with a strong background in packaging machinery and production lines. As part of our client's worldwide engineering packaging division, the...

  • Junior Product Engineer

    1 month ago

    Madison, United States OrganOx Full time

    OrganOx has been transforming organ transplantation since 2008, leveraging groundbreaking normothermic machine perfusion technology in our flagship product, the OrganOx metra®. This technology helps preserve donor livers for up to 12 hours, in efforts to reduce organ discard rates and facilitate more successful transplants. We are an innovative, fast-paced...

  • Junior Product Engineer

    1 month ago

    Madison, United States OrganOx Full time

    OrganOx has been transforming organ transplantation since 2008, leveraging groundbreaking normothermic machine perfusion technology in our flagship product, the OrganOx metra®. This technology helps preserve donor livers for up to 12 hours, in efforts to reduce organ discard rates and facilitate more successful transplants. We are an innovative, fast-paced...

  • Product Security Test Engineer

    1 week ago

    Madison, Wisconsin, United States Verve Industrial Protection Full time

    Job OverviewVerve Industrial Protection is seeking a highly skilled Cybersecurity Specialist to join our team. As a key member of our security team, you will play a critical role in ensuring the security and integrity of our software products.The ideal candidate will have a strong background in software security, with experience in manual and automated...

  • QA Engineer

    3 weeks ago

    Madison, United States Sprocket Security Full time

    Company Mission - Our mission is to help secure as many companies as possible, by using the best way of doing so, penetration testing. Sprocket Security prioritizes offensive security for enterprises, empowering them to build robust defense strategies based on individual business risk. How - At Sprocket Security, we've built an expert-driven Continuous...

  • QA Engineer

    1 month ago

    Madison, United States Sprocket Security Full time

    Company Mission - Our mission is to help secure as many companies as possible, by using the best way of doing so, penetration testing. Sprocket Security prioritizes offensive security for enterprises, empowering them to build robust defense strategies based on individual business risk. How - At Sprocket Security, we've built an expert-driven Continuous...

  • Senior Product Owner

    2 months ago

    Madison, Wisconsin, United States Hexagon AB Full time

    ResponsibilitiesHexagon Asset Lifecycle Intelligence division (Hexagon) is seeking a Senior Product Owner. The Senior Product Owner will work as a member of our HxGN EAM Development Team. Product Owner will work in several areas: Product Planning, Product Development, Launch, Release and Lifecycle Management. Tasks, roles, and responsibilities will vary...

  • Product Development Engineer

    4 days ago

    Madison, New Jersey, United States OrganOx Full time

    Job DescriptionOrganOx is a pioneering medical device company that has been revolutionizing organ transplantation since 2008. Our flagship product, the OrganOx metra, utilizes groundbreaking normothermic machine perfusion technology to preserve donor livers for up to 12 hours, reducing organ discard rates and facilitating more successful transplants.Job...

  • Associate Product Engineering Specialist

    2 weeks ago

    Madison, New Jersey, United States OrganOx Full time

    OrganOx is at the forefront of revolutionizing organ transplantation since its inception, utilizing cutting-edge normothermic machine perfusion technology in our premier product, the OrganOx metra. This innovative technology aids in preserving donor livers for extended periods, thereby aiming to decrease organ discard rates and enhance transplant success...

  • Staff Red Team Engineer

    2 months ago

    Madison, Wisconsin, United States ServiceNow Full time

    ServiceNow Staff Red Team Engineer Job DescriptionServiceNow is looking for a highly skilled and experienced Staff Red Team Engineer to join their Red Team. As a Staff Red Team Engineer, you will play a crucial role in safeguarding assets through real-world attack simulations and collaborative defense strategies. This position requires a blend of technical...

  • Senior Quality Engineer

    4 weeks ago

    Madison, United States Connect Search, LLC Full time

    SummaryConnect Search is hiring a Senior Lead Quality Engineer in Madison.Required QualificationsBachelor’s degree in Mechanical or Industrial Engineering or related discipline.8+ years of experience in a manufacturing or quality engineering function2+ years of supervisory experience.Knowledge of Six Sigma concepts.Focus of the RoleThe Senior Lead Quality...

  • Senior Quality Engineer

    2 months ago

    Madison, United States Connect Search, LLC Full time

    SummaryConnect Search is hiring a Senior Lead Quality Engineer in Madison.Required QualificationsBachelor’s degree in Mechanical or Industrial Engineering or related discipline.8+ years of experience in a manufacturing or quality engineering function2+ years of supervisory experience.Knowledge of Six Sigma concepts.Focus of the RoleThe Senior Lead Quality...