Staff Security Engineer – Enterprise Security
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Staff Security Engineer securing ServiceNow’s AI-powered enterprise SaaS platform across cloud, on-premises, and isolated infrastructure. Supporting Protected B workloads and Canadian government compliance.
Responsibilities:
- Engineer, harden, and operate security controls across on-premises, cloud, and isolated infrastructure
- Build automation and infrastructure-as-code to streamline security operations, reporting, and remediation
- Partner with infrastructure, application, and platform owners to drive remediation and track compliance against CIS and NIST baselines
- Support security tooling across identity, vulnerability scanning, logging, and cloud security based on team priorities
- Produce operational and executive-facing reporting on security posture and performance
- Manage and optimize the ServiceNow platform, including workflows, access, data integrity, ITSM modules, scripting, and ACLs
- Support ServiceNow Security Operations applications including Vulnerability Response, Configuration Compliance, and Security Incident Response
Requirements:
- Canadian citizen or Canadian permanent resident
- Live in Canada and perform all work from within Canada
- Obtain and maintain Government of Canada Reliability Status
- Five years of verifiable background history for screening
- 8+ years of hands-on security engineering or systems administration experience in large-scale enterprise environments
- Strong Linux administration and troubleshooting skills; working knowledge of Windows and directory services (Active Directory, LDAP)
- Proficiency in Python, plus PowerShell or Bash, for production-grade automation and integrations
- Experience with infrastructure-as-code and DevOps practices, including Terraform, Ansible or Puppet, CI/CD pipelines, and Git-based workflows
- Solid understanding of network security fundamentals, including firewalls, segmentation, proxies, and DNS
- Experience hardening systems against CIS, STIG, or NIST baselines and translating requirements into technical controls
- Understanding of Canada Protected B classification and data residency requirements for Canadian government systems
- Hands-on experience in at least two specialty areas
- ServiceNow Administrator experience, including CSA certification or equivalent experience, workflow configuration, user access and data integrity, ITSM modules, JavaScript, GlideScript, and ACLs
- Familiarity with ServiceNow Security Operations applications such as Vulnerability Response, Configuration Compliance, and Security Incident Response
- Preferred certifications include CISSP, CCSP, CISM, ServiceNow CSA, Tenable Certified Engineer, Cribl Admin, or a GCP security certification
- Experience supporting highly regulated, isolated, or air-gapped government environments is preferred
- Experience with AI or LLM-based automation is preferred
- Strong understanding of ITIL and ITSM processes is preferred
Benefits:
- Flexible or remote work persona
- Employer-sponsored Government of Canada Reliability Status screening
- Equal opportunity employment
- Reasonable accommodations during the application process
Similar Jobs
Chartered or Principal Enterprise Advisor – Security Architecture
Security architecture advisor assuring cloud, hybrid and on-premises environments for Intelance, a UK cybersecurity and advisory firm. Delivering threat models, design reviews and client-ready assurance reports.
Senior Baseline Security Engineer, CIS, STIGs
Senior security engineer building and validating CIS/STIG baselines for phia’s federal cybersecurity clients. Mapping configurations to NIST, FISMA, and agency security controls.
Senior Security Architect
Senior Security Architect advancing First Hawaiian Bank’s enterprise security architecture. Securing hybrid cloud, on-premises, and AI/ML technologies while supporting regulatory compliance.
Director of Security, Risk
Director leading security governance, compliance, and risk programs at SentiLink, which verifies identities and flags fraud. Owning FedRAMP, SOC 2, PCI DSS, and third-party risk.
Vulnerability Management Engineer, Security Assessment – Qualys VMDR
Vulnerability engineer operating Qualys VMDR, security assessments, and remediation tracking. Supporting Gruve’s enterprise cybersecurity and cloud infrastructure services through global 24x7 operations.
Senior Cloud Security Engineer
Senior Cloud Security Engineer owning AWS security for Erbis’s enterprise supply-chain and shipment platform. Leading detection, incident response, identity, compliance, and AI-assisted security operations.
Information Security Consultant
Information Security Consultant delivering GRC engagements, risk assessments and vCISO advisory. Helping Cognisys clients strengthen security programmes and achieve compliance certifications.
Senior Cybersecurity IAM Engineer
Senior IAM Engineer managing identity, access, authentication, and entitlement systems for Louisiana Blue, a health insurer. Designing secure IAM architecture, integrations, and controls.
Product Security Engineer
Product Security Engineer securing Superhuman’s AI productivity platform, products, and AI agents. Building secure-by-default tooling, guardrails, and product security practices.
IT Lead – Security
IT and cybersecurity lead owning systems, support, hardware, and security for Frontline’s remote wildfire-defense technology company. Building IT operations and SOC 2 readiness as its first dedicated IT professional.
Senior Director, Product Security
Senior Director leading application, privacy, device, and research security at 1Password. Building secure access solutions for over 180,000 businesses.
Security Engineer II
Analista de Governança de TI apoiando controles, auditorias e riscos tecnológicos na Stone. Contribuição para a melhoria contínua dos processos de tecnologia da fintech brasileira de pagamentos.
Senior AWS DevOps/Security Engineer – Architect
Senior AWS DevOps/Security Engineer designing, securing, and operating Tieto’s AWS platforms. Automating infrastructure, CI/CD, monitoring, and production operations for modernization and migration programs.
Senior Security Engineer, Product Security
Senior Security Engineer securing Komodo Health’s healthcare data platform, software supply chain, and AI features. Automating product-security testing and remediation across US-based engineering teams.
Senior Digital Security Specialist – Offensive and Defensive Security
Especialista sênior em segurança digital na Evertec, empresa de tecnologia financeira. Executando testes de intrusão e orientando remediações em aplicações, infraestrutura e nuvem.
Senior Instructor, Training – Cloud Security
Cloud security instructor delivering hands-on CNAPP and Falcon Cloud Security training. Developing courses, certification exams, and labs for CrowdStrike customers.
Cloud Azure Security Engineer
Cloud Azure Security Engineer securing Microsoft Azure environments for Monks, a global AI-powered transformation consultancy. Managing Entra ID, compliance controls, vulnerabilities, and cloud security automation.
Staff Product Security Engineer
Staff Product Security Engineer embedding with ServiceTitan engineering portfolios to secure SaaS applications, cloud infrastructure, and AI-enabled features. Driving threat modeling, remediation, paved-road adoption, and portfolio risk reduction.
Senior Information Security Coordinator
Coordenador sênior de segurança da informação no Bernoulli Educação, grupo educacional brasileiro. Gestão de riscos, LGPD, incidentes, vulnerabilidades e equipes.
Incident Response Product Security Engineer II
Incident response engineer securing Esri’s ArcGIS geographic-information software. Investigating vulnerabilities, facilitating red-team exercises, and advancing product security practices.