Product Security Engineer

Company Description
It all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could do that for everyone-freeing people from busywork so they could focus on meaningful work. Today, ServiceNow is the AI control tower for business reinvention. Our ServiceNow AI platform brings together any AI, any data, and any workflow- helping 85% of the Fortune 500® work smarter, faster, and better. We're building an AI-native culture where technology and talent are unstoppable together. And we're just getting started.
Join us to put AI to work for people.
Job Description
As a member of the DevSecOps team, you will design, develop, operate, and scale of our Enterprise Container Security program, providing container security services across ServiceNow. In addition, you'll be able to apply your container security knowledge to our own containerized services for SAST, DAST, and SCA by helping with the development, deployment, integration, and scale of these services at ServiceNow. You will work closely with ServiceNow Security Organization, Build Engineering, Tools Engineering and Infrastructure Operations teams to build a world-class Enterprise Container Security program as well as deploy and maintain scalable containerized system images for application security toolchains.
What you get to do in this role:

• As an engineer on the ServiceNow Application Security Team, you will be responsible in identifying security vulnerabilities within our platform.
• In this role, you will interface with external researchers and customers that perform security assessments against ServiceNow.
• You will have the opportunity to run dynamic security testing tools, plan projects, and be a security advocate.
• A key part of this position is to effectively report issues to application owners, provide meaningful remediation recommendations, and validate that issues have been resolved.

Qualifications
To be successful in this role you have:

• 2+ years of experience as a build engineer or developer using Containers and Kubernetes within a CI/CD platforms (such as Jenkins)
• Owned the entire lifecycle of an application or feature, including the engineering design, development and deployment
• Prioritized and valued unowned or undesirable work that enables their team and/or other teams to work faster
• Worked with their team and adjacent teams to solve problems.
• 2+ years of experience securing containerized workloads on Kubernetes
• 2+ years of experience of hosting infrastructure in public cloud environments (AWS required)
• 2+ years of experience working knowledge of Cloud Infrastructure (AWS required, Azure and GCP nice to have) and Infrastructure as Code (e.g. Terraform)
• 1+ years of scripting experience (Groovy and Python)
• 1+ years of experience with Nexus or Artifactory
• Knowledge of AI models and building AI applications on services like Amazon Bedrock
• Knowledge of static application security testing, dynamic application security testing, and software composition analysis tool chains a plus but not required
• BS in computer science or equivalent work experience

JV20
Additional Information
Work Personas
We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here . To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service.
Equal Opportunity Employer
ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements.
Accommodations
We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact [email protected] for assistance.
Export Control Regulations
For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities.
From Fortune. ©2026 Fortune Media IP Limited. All rights reserved. Used under license.