Staff Security Engineer | Enterprise Security

Eligibility

This position supports Government of Canada Protected B workloads. To be considered you must:

• Be a Canadian citizen or Canadian permanent resident.
• Live in Canada and perform all work from within Canada.
• Obtain and maintain Government of Canada Reliability Status. Screening requires five years of verifiable background history and includes identity verification education verification a criminal record check and a credit check.

You dont need to hold Reliability Status today. ServiceNow sponsors the screening through our Company Security Officer under Public Services and Procurement Canadas Contract Security Program.

PLEASE DO NOT APPLY IF YOU DO NOT MEET THE ABOVE ELIGIBILITY Thank you

The ServiceNow Security Organization (SSO) 

The ServiceNow Security Organization (SSO) delivers world-class innovative security solutions to reduce risk and protect the company and our customers. We enable our customers to migrate their most sensitive data and workloads to the cloud accelerating our business so that we are the most trusted SaaS provider. We create an environment where our employees are proud to work and can make a positive impact

What Youll Do

• Engineer harden and operate security controls across on-premises cloud and isolated infrastructure.
• Build automation and infrastructure-as-code that streamlines security operations reporting and remediation.
• Partner with infrastructure application and platform owners to drive remediation and track compliance against CIS and NIST baselines.
• Support security tooling across identity vulnerability scanning logging and cloud security based on team priorities.
• Produce operational and executive-facing reporting on security posture and performance.

Required Qualifications

• 8 years of hands-on security engineering or systems administration experience in large-scale enterprise environments.
• Strong Linux administration and troubleshooting skills with working knowledge of Windows and directory services (Active Directory LDAP).
• Proficiency in Python plus PowerShell or Bash for production-grade automation and integrations.
• Experience with infrastructure-as-code and DevOps practices including Terraform Ansible or Puppet CI/CD pipelines and Git-based workflows.
• Solid understanding of network security fundamentals including firewalls segmentation proxies and DNS.
• Experience hardening systems against CIS STIG or NIST baselines and translating requirements into technical controls.
• Understanding of Canada Protected B classification and data residency requirements for Canadian government systems.
   

Qualifications :

Specialty Experience (Hands-On Experience in At Least Two Areas)

• Identity and Access Management: PAM (BeyondTrust or CyberArk) SailPoint IIQ or SSO platforms such as PingFederate or ForgeRock.
• Vulnerability Management: Tenable SC and IO scan design and tuning and risk-based prioritization using CVSS EPSS and known exploited vulnerability data.
• Public Cloud Security: GCP security with working knowledge of AWS or Azure Wiz and CSPM DSPM or KSPM tooling.
• Security Data Platforms: Distributed on-premises Splunk administration and Cribl Stream or Edge.
• Infrastructure Security: OS hardening (SELinux AppArmor auditd) PKI and certificate lifecycle management and container or Kubernetes security.
• ServiceNow Administrator: CSA certification or equivalent experience to manage and optimize our ServiceNow platform including configuring workflows maintaining user access and data integrity supporting ITSM modules and scripting (JavaScript GlideScript) and ACLs while partnering with stakeholders to deliver reliable scalable solutions.
• ServiceNow Security Operations: Well versed in ServiceNow Security Operations applications such as Vulnerability Response Configuration Compliance and Security Incident Response. 

Preferred Qualifications

• Certifications such as CISSP CCSP CISM ServiceNow CSA Tenable Certified Engineer Cribl Admin or a GCP security certification.
• Experience supporting highly regulated isolated or air-gapped government environments.
• Experience with AI or LLM-based automation including agents chatbots or API-driven workflows.
• Strong understanding of ITIL and ITSM processes.

#SecurityJobs

This role may require a higher level of security clearance in the future. Employment is conditional on successfully completing and maintaining the required screening. We cant consider applications that dont meet these requirements.

Additional Information :

Work Personas

We approach our distributed world of work with flexibility and trust. Work personas (flexible remote or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service.

Equal Opportunity Employer

ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race color religion sex sexual orientation national origin age disability gender identity  veteran status or any other category protected by addition all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements. 

Accommodations

We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process or are unable to use this online application and need an alternative method to apply please contact for assistance. 

Export Control Regulations

For positions requiring access to controlled technology subject to export control regulations including the U.S. Export Administration Regulations (EAR) ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities. 

From Fortune. 2026 Fortune Media IP Limited. All rights reserved. Used under license.

Remote Work :

Yes

Employment Type :

Full-time