Staff Application Security Engineer

Job Summary

Focused on securing ServiceNow instances, the full-time Staff Application Security Engineer will identify and remediate configuration-driven security risks, validate customer-reported findings, and provide actionable remediation guidance, with the flexibility to work remotely.

Key responsibilities

• Assess and harden ServiceNow instance configurations against security baselines to identify misconfigurations impacting security
• Triage and validate customer-reported security findings, distinguishing between product vulnerabilities and configuration issues
• Develop prescriptive guidance for instance hardening, covering authentication, access controls, and operational security

Required qualifications

• 8+ years of experience in application security, including vulnerability analysis and secure design principles
• Ability to read, write, and debug code to validate security findings
• Experience in translating security risks into actionable remediation guidance
• Strong understanding of integrating AI into security processes and decision-making
• Excellent written communication skills for customer-facing content