
10,000+ employees
Founded 2004
🏢 Enterprise
☁️ SaaS
🤖 Artificial Intelligence
💰 Post-IPO Equity on 2022-12
Enterprise • SaaS • Artificial Intelligence
ServiceNow is a platform that offers AI-powered solutions and automation for businesses to enhance productivity and streamline workflows. Its AI agents are designed to autonomously learn, reason, make decisions, and take action to transform business processes across various domains such as IT, HR, customer service, and app development. The platform enables organizations to integrate data from diverse sources, facilitating business transformation and operational efficiency. Recognized for its leadership in AI IT service management and trusted by a significant portion of the Fortune 500, ServiceNow collaborates with other global leaders like Microsoft and AWS to bring advanced AI capabilities to modernize business operations.
🔥 2 hours ago
Cloud
Cyber Security
Docker
Java
JavaScript
Jenkins
Kubernetes
Microservices
Node.js
Python
React
SDLC
Terraform
TypeScript
Go
Where this job comes from
Posted on ServiceNow's careers page, not through a job board
First seen by Remote Rocketship 2 hours ago
Still open on ServiceNow's site. Checked 1 hour ago.

10,000+ employees
Founded 2004
🏢 Enterprise
☁️ SaaS
🤖 Artificial Intelligence
💰 Post-IPO Equity on 2022-12
Enterprise • SaaS • Artificial Intelligence
ServiceNow is a platform that offers AI-powered solutions and automation for businesses to enhance productivity and streamline workflows. Its AI agents are designed to autonomously learn, reason, make decisions, and take action to transform business processes across various domains such as IT, HR, customer service, and app development. The platform enables organizations to integrate data from diverse sources, facilitating business transformation and operational efficiency. Recognized for its leadership in AI IT service management and trusted by a significant portion of the Fortune 500, ServiceNow collaborates with other global leaders like Microsoft and AWS to bring advanced AI capabilities to modernize business operations.
• Lead the Application Security program across all Armis products and embed security throughout the SDLC • Perform secure design and architecture reviews with engineering teams • Lead threat modeling sessions using STRIDE, DREAD, or PASTA methodologies • Own application-layer vulnerability management within Armis’ VIPR strategy from detection through remediation and validation • Integrate SAST, DAST, SCA, and API testing findings into centralized vulnerability workflows, risk scoring, and prioritization models • Correlate application vulnerabilities with asset context, exploit intelligence, and business criticality • Track and report MTTD, MTTR, exposure windows, and remediation effectiveness • Build and maintain automated AppSec pipelines for SAST, DAST, SCA, and API security testing • Integrate security scanning into CI/CD pipelines including GitHub Actions, Jenkins, and Buildkite • Partner with Cloud and Infrastructure Security to secure APIs, microservices, Docker, and Kubernetes workloads • Develop and maintain secure coding standards and security baselines for React, Node.js, Python, Java, and Go • Mentor engineers and security champions and deliver secure coding training and threat modeling workshops • Advise engineering leadership by translating vulnerabilities into risk and remediation guidance • Support SOC 2, ISO 27001, FedRAMP, and HIPAA compliance and audit readiness
• Spain residency/location required • 7–10+ years of experience in Application Security, Product Security, or Secure Software Engineering • Proven expertise in SAST, DAST, SCA, and dependency management tools such as Veracode, Checkmarx, Fortify, Snyk, SonarQube, and OWASP Dependency-Check • Experience in a SaaS, cloud-native, or cybersecurity product company preferred • Hands-on experience integrating AppSec into VIPR or exposure management programs preferred • Familiarity with Prisma Cloud, Wiz, or Orca preferred • Experience with Terraform or CloudFormation preferred • Exposure to API Gateway security, OAuth2, token-based authentication, and zero-trust architectures preferred • Relevant certifications such as OSWE, CSSLP, GWAPT, GWEB, or CEH preferred • Hands-on coding proficiency in at least two of Python, JavaScript/TypeScript, Java, and Go • Strong experience managing vulnerabilities end-to-end, including triage, prioritization, remediation tracking, and validation • Deep understanding of OWASP Top 10, CWE, CVE, and exploitability concepts • Strong knowledge of CI/CD pipelines, Git-based workflows, and secure build automation • Experience with threat modeling, secure architecture reviews, and microservices/API security • Ability to communicate technical risk to engineering teams and business stakeholders
• Full-time regular employee position • Flexible or remote work persona • Accessible and inclusive application experience • Reasonable accommodation support during the application process
Apply NowImprove your chances of getting an interview by checking your resume score before you apply.