Staff Application Security Engineer (ServiceNow Instance Security)

Role Summary:

• Secure ServiceNow instances by identifying configuration-driven security risks and validating customer-reported findings.
• Operate with minimal direction at the senior end, owning complex instance-security problem spaces.

Key Responsibilities:

• Assess instance configurations against security baselines and develop hardening guidance.
• Triage and contextualize customer-reported security findings, distinguishing product vulnerabilities from configuration issues.
• Partner with Product Security, Engineering, and other teams to resolve high-impact findings.

What Success Looks Like:

• Customers and internal teams receive clear, accurate, and actionable guidance to secure instances.
• Reduced repeat instance-security issues through improved baselines and detection.
• GSSC AppSec becomes more scalable and consistent in addressing instance-level security risk.