# Senior Staff Security Engineer | Systems EngineeringServiceNow
· servicenow.comCategory: Cloud SecurityLocation: RemoteLevel: Staff / Principal## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.
* Paid parental leave
* Retirement match
* Equity
* Learning budgetEligibilityThis position supports Government of Canada Protected B workloads. To be considered, you must:Be a Canadian citizen or Canadian permanent resident.
Live in Canada and perform all work from within Canada.
Obtain and maintain Government of Canada Reliability Status. Screening requires five years of verifiable background history and includes identity verification, education verification, a criminal record check, and a credit check.
You don’t need to hold Reliability Status today. ServiceNow sponsors the screening through our Company Security Officer under Public Services and Procurement Canada’s Contract Security Program.
PLEASE DO NOT APPLY IF YOU DO NOT MEET THE ABOVE ELIGIBILITY, Thank youThe ServiceNow Security Organization (SSO)The ServiceNow Security Organization (SSO) delivers world-class, innovative security solutions to reduce risk and protect the company and our customers. We enable our customers to migrate their most sensitive data and workloads to the cloud, accelerating our business so that we are the most trusted SaaS provider. We create an environment where our employees are proud to work and can make a positive impactAbout the RoleServiceNow’s Enterprise Security organization is seeking a versatile Senior Staff Security Systems Engineer to support multiple security engineering functions in our Canadian regulated environment. You’ll work across identity, vulnerability management, cloud and infrastructure security, security data platforms, and ServiceNow security operations.



This role suits an engineer who enjoys breadth, solves problems across disciplines, and builds automation that scales.
What You’ll DoServe as the senior technical authority for security engineering in the Canada regulated workplace.
Engineer, harden, and operate security controls across on-premises, cloud, and isolated infrastructure.
Build automation and infrastructure-as-code that streamlines security engineering and operations, reporting, and remediation.
Partner with infrastructure, application, and platform owners to drive remediation and track compliance against CIS and NIST baselines.
Support security tooling across identity, vulnerability scanning, logging, and cloud security based on team priorities.
Produce operational and executive-facing reporting on security posture and performance.
Required Qualifications12+ years of hands-on security or systems engineering experience in large-scale enterprise environments.
Expert Linux administration and troubleshooting skills across OS internals, host networking, storage, virtualization, and containers. Proficiency with DNS, NTP, and LDAP services.
Proficiency in Python and Shell for production-grade automation and integrations.
Experience with DevOps methodologies: infrastructure-as-code and configuration management including Terraform, Ansible or Puppet; CI/CD pipelines; and Git-based workflows.
Expertise in network security fundamentals, including firewalls, segmentation, load balancers,



and proxies.
Experience hardening systems against CIS, STIG, or NIST baselines and translating requirements into technical controls.
Experience using AI in your work, whether through AI-powered tools, automated workflows, AI-driven insights, or evaluating where AI can change how a function operates.
Understanding of Canada Protected B classification and data residency requirements for Canadian government systems.
Specialty Experience (Hands-On Experience in At Least Two Areas)Identity and Access Management: PAM (BeyondTrust or CyberArk), SailPoint IIQ, or SSO platforms such as PingFederate or ForgeRock.
Vulnerability Management: Tenable SC and IO scan design and tuning, and risk-based prioritization using CVSS, EPSS, and known exploited vulnerability data.
Public Cloud Security: GCP security with working knowledge of AWS or Azure, Wiz, and CSPM, DSPM, or KSPM tooling.
Security Data Platforms: Distributed on-premises Splunk administration and Cribl Stream or Edge.
Infrastructure Security: OS hardening (SELinux, AppArmor, auditd), PKI and certificate lifecycle management, and container security.
ServiceNow Administrator: CSA certification or equivalent experience to manage and optimize our ServiceNow platform, including configuring workflows, maintaining user access and data integrity, supporting ITSM modules, and scripting (JavaScript, GlideScript) and ACLs, while partnering with stakeholders to deliver reliable, scalable solutions.
ServiceNow Security Operations: Well versed in ServiceNow Security Operations applications such as Vulnerability Response, Configuration Compliance, and Security Incident Response.
Preferred QualificationsCertifications such as CISSP, CCSP, CISM, ServiceNow CSA, Tenable Ce

📌 Senior Staff Security Engineer | Systems Engineering (Canada)
🏢 VulnU
📍 Canada