Job description
Job Description
About Digital Technology:
We're not yesterday's IT department, we're Digital Technology. The world around us keeps changing and so do we. We're redefining what it means to be IT with a mindset centered on transformation, experience, AI–driven automation, innovation, and growth.
We're all about delivering delightful, secure customer and employee experiences that accelerate ServiceNow's journey to become the defining enterprise software company of the 21st century. And we love co–creating, using, and highlighting our own products to do it.
Ultimately, we strive to make the world work better for our employees and customers when you work in ServiceNow Digital Technology, you work for them.
The ServiceNow Security Organization delivers world–class, innovative security solutions to reduce risk and protect the company and our customers. We enable our customers to migrate their most sensitive data and workloads to the cloud, accelerating our business so that we are the most trusted SaaS provider. We create an environment where our employees are proud to work and can make a positive impact.
What you get to do in this role:
As a key member of the Security team, you will be responsible for architecting, building and consulting on solutions related to securing our global cloud infrastructure that runs our SaaS product.
The Security team designs and implements the security infrastructure that runs our SaaS platform at scale with high availability.
Research security technologies and products in the marketplace
Determines security requirements by evaluating business strategies and requirements; researching Information Security standards; conducting system security and vulnerability analyses and risk assessments; studying architecture/platform; identifying integration issues; preparing cost estimates.
Plans security systems by evaluating network and security technologies; developing requirements for network environments; designs public key infrastructures (PKIs), including use of certification authorities (CAs) and digital signatures as well as hardware and software encryption solutions; adhering to industry standards.
Implements security systems by specifying intrusion detection methodologies, preparing preventive and reactive measures; creating, transmitting, and maintaining keys and encrypted data; providing technical guidance to engineering and support teams; completing documentation.
Verifies system and application security by performing security assessments, code reviews, configuration and design reviews.
Maintains security by ensuring we have adequate security measures that align with our compliance standards and policies; conducting incident response analysis when required, and working with leadership and technical teams on remediation plans.
Helps define and scope new projects and programs, prepares presentation material including problem statements, proposed solutions, and business justification.