{"id":3895473,"url":"https://alion.io/job/servicenow-staff-security-engineer-enterprise-security","title":"Staff Security Engineer | Enterprise Security","company":{"id":97,"name":"ServiceNow","domain":"servicenow.com","url":"https://alion.io/company/servicenow","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":80,"open_postings":40,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":18,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Toronto, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"BeyondTrust","optional":false},{"name":"CI/CD","optional":false},{"name":"CVSS","optional":false},{"name":"CyberArk","optional":false},{"name":"DNS","optional":false},{"name":"EPSS","optional":false},{"name":"GCP","optional":false},{"name":"Git","optional":false},{"name":"ITSM","optional":false},{"name":"JavaScript","optional":false},{"name":"Kubernetes","optional":false},{"name":"LDAP","optional":false},{"name":"Linux","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Puppet","optional":false},{"name":"Python","optional":false},{"name":"ServiceNow","optional":false},{"name":"Splunk","optional":false},{"name":"Terraform","optional":false},{"name":"Windows","optional":false},{"name":"Wiz","optional":false},{"name":"ITIL","optional":true},{"name":"LLM","optional":true}],"status":"live","first_seen_at":"2026-11-06T20:43:47Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-09T17:18:49Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"It all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could do that for everyone-freeing people from busywork so they could focus on meaningful work. Today, ServiceNow is the AI control tower for business reinvention. Our ServiceNow AI platform brings together any AI, any data, and any workflow- helping 85% of the Fortune 500® work smarter, faster, and better. We're building an AI-native culture where technology and talent are unstoppable together. And we're just getting started.\nJoin us to put AI to work for people.\n Eligibility\nThis position supports Government of Canada Protected B workloads. To be considered, you must:\nBe a Canadian citizen or Canadian permanent resident.\nLive in Canada and perform all work from within Canada.\nObtain and maintain Government of Canada Reliability Status. Screening requires five years of verifiable background history and includes identity verification, education verification, a criminal record check, and a credit check.\nYou don’t need to hold Reliability Status today. ServiceNow sponsors the screening through our Company Security Officer under Public Services and Procurement Canada’s Contract Security Program.\nPLEASE DO NOT APPLY IF YOU DO NOT MEET THE ABOVE ELIGIBILITY, Thank you\nThe ServiceNow Security Organization (SSO)\nThe ServiceNow Security Organization (SSO) delivers world-class, innovative security solutions to reduce risk and protect the company and our customers. We enable our customers to migrate their most sensitive data and workloads to the cloud, accelerating our business so that we are the most trusted SaaS provider. We create an environment where our employees are proud to work and can make a positive impact\nWhat You’ll Do\nEngineer, harden, and operate security controls across on-premises, cloud, and isolated infrastructure.\nBuild automation and infrastructure-as-code that streamlines security operations, reporting, and remediation.\nPartner with infrastructure, application, and platform owners to drive remediation and track compliance against CIS and NIST baselines.\nSupport security tooling across identity, vulnerability scanning, logging, and cloud security based on team priorities.\nProduce operational and executive-facing reporting on security posture and performance.\nRequired Qualifications\n8+ years of hands-on security engineering or systems administration experience in large-scale enterprise environments.\nStrong Linux administration and troubleshooting skills, with working knowledge of Windows and directory services (Active Directory, LDAP).\nProficiency in Python, plus PowerShell or Bash, for production-grade automation and integrations.\nExperience with infrastructure-as-code and DevOps practices, including Terraform, Ansible or Puppet, CI/CD pipelines, and Git-based workflows.\nSolid understanding of network security fundamentals, including firewalls, segmentation, proxies, and DNS.\nExperience hardening systems against CIS, STIG, or NIST baselines and translating requirements into technical controls.\nUnderstanding of Canada Protected B classification and data residency requirements for Canadian government systems.\n Specialty Experience (Hands-On Experience in At Least Two Areas)\nIdentity and Access Management: PAM (BeyondTrust or CyberArk), SailPoint IIQ, or SSO platforms such as PingFederate or ForgeRock.\nVulnerability Management: Tenable SC and IO scan design and tuning, and risk-based prioritization using CVSS, EPSS, and known exploited vulnerability data.\nPublic Cloud Security: GCP security with working knowledge of AWS or Azure, Wiz, and CSPM, DSPM, or KSPM tooling.\nSecurity Data Platforms: Distributed on-premises Splunk administration and Cribl Stream or Edge.\nInfrastructure Security: OS hardening (SELinux, AppArmor, auditd), PKI and certificate lifecycle management, and container or Kubernetes security.\nServiceNow Administrator: CSA certification or equivalent experience to manage and optimize our ServiceNow platform, including configuring workflows, maintaining user access and data integrity, supporting ITSM modules, and scripting (JavaScript, GlideScript) and ACLs, while partnering with stakeholders to deliver reliable, scalable solutions.\nServiceNow Security Operations: Well versed in ServiceNow Security Operations applications such as Vulnerability Response, Configuration Compliance, and Security Incident Response. \nPreferred Qualifications\nCertifications such as CISSP, CCSP, CISM, ServiceNow CSA, Tenable Certified Engineer, Cribl Admin, or a GCP security certification.\nExperience supporting highly regulated, isolated, or air-gapped government environments.\nExperience with AI or LLM-based automation, including agents, chatbots, or API-driven workflows.\nStrong understanding of ITIL and ITSM processes.\n#SecurityJobs\nThis role may require a higher level of security clearance in the future. Employment is conditional on successfully completing and maintaining the required screening. We can’t consider applications that don’t meet these requirements.\nWork Personas\nWe approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service.\nEqual Opportunity Employer\nServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, gender identity, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements.\nAccommodations\nWe strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact  for assistance.\nExport Control Regulations\nFor positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities.\nFrom Fortune. ©2026 Fortune Media IP Limited. All rights reserved. Used under license.","description_format":"text","description_chars":6917,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Workflow & Process Automation (RPA, BPM)","IT Service & Asset Management","AI Agents","Customer Support & Help Desk Software"],"lifecycle":[{"event":"open","at":"2026-11-06T23:04:43Z"}],"visa":[{"country":"CA","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"Approved LMIA in the last two years","filings_12m":0,"filings_prev_12m":1,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-11-09T07:32:21+00:00","sources":["ESDC: employers issued a positive LMIA"],"filings_for_role_12m":0}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":2,"expected_fill_days":18,"reasons":["conf:2","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-09T06:03:00Z"},"pay":null,"html_url":"https://alion.io/job/servicenow-staff-security-engineer-enterprise-security","json_url":"https://alion.io/job/servicenow-staff-security-engineer-enterprise-security.json","meta":{"generated_at":"2026-11-09T19:55:35Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6446,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":97},"rest":"https://alion.io/mcp/rest/get_company?id=97"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fservicenow-staff-security-engineer-enterprise-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fservicenow-staff-security-engineer-enterprise-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fservicenow-staff-security-engineer-enterprise-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/servicenow-staff-security-engineer-enterprise-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fservicenow-staff-security-engineer-enterprise-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3895473}},{"tool":"search_jobs","arguments":{"company":"servicenow.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3895473},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}