Senior Endpoint Security Engineer

Team

This position reports to the Senior Manager, Security Engineering. The Enterprise Security Engineering team targets building state-of-the-art technology that will help reduce the risk surrounding the sensitive assets of the company with the least impact possible on operations, acts as guidance and facilitator to the security operations teams and helps shifting Security perception from blocker to enabler by building a relationship of trust with the other teams.

Role

The Senior Information Security Engineer will be part of the endpoint security team and will be responsible for ensuring the integrity and security of the organization's information systems by managing and enhancing endpoint and network security measures.

What you get to do in this role: 

• Implement security measures using DevSecOps framework to protect Mac & Windows laptops, VDIs, Mobile devices, Browsers, Email, Managed/Unmanaged software, IoT devices
• Implement user trust and device trust for managed and unmanaged endpoints
• Implement security posture management for managed and unmanaged endpoints
• Secure access to corporate, commercial, and regulated markets network from endpoints
• Deploy Endpoint Detection Response across the enterprise
• Collaborate with Insider Threat team to create DLP policies for hosts, network, email, and apps
• Collaborate with DG team to build connectors that perform data scan on critical assets
• Manage privileged access for endpoints
• Manage credential vaulting and rotation for corporate assets and endpoints 
• Participate in security incidents and help implement the containment and eradication. 
• Remediation of audit findings.
• Accountable for the timely delivery of projects as per established roadmaps by working closely with the business teams 

To be successful in this role you have: 

• Experience in leveraging or critically thinking about how to integrate AI into work processes, decision-making, or problem-solving. This may include using AI-powered tools, automating workflows, analyzing AI-driven insights, or exploring AI’s potential impact on the function or industry. 
• A Computer Science/Engineering degree with 4+ years of proven, related experience is required
• 5+ years of proven experience in endpoint or infrastructure security
• Good understanding of DevSecOps and CI/CD principles, with experience integrating security into these practices
• Solid understanding of cloud architecture, Linux and Windows OS and networking concepts
• Hands-on experience with security tooling and technologies
• Experience with Automation (Python, Perl, bash scripting, etc.) 
• Experience with EPM (JAMF, SCCM etc.) and MDM and MAM (Intune, AirWatch etc.) solutions   
• Experience in Linux, Windows, Mac systems security.  
• Experience/Knowledge with security tools including (not limited to): 

1. Anti-Malware and Endpoint Detection Response (CrowdStrike)
2. Networking Security (Firewalls, NAC, Zero Trust, etc.) 
3. Logging and Aggregation tools 
4. Deception technologies 
5. Vulnerability scanning (Wiz, Tenable)
6. Privileged Access Management- Privileged Session Management (PAM-PSM) (BeyondTrust EPM/PSM)
7. Data Loss prevention tools (DLP) (Microsoft Information Purview, Cososys, Zscaler, O365)

Not sure if you meet every qualification? We still encourage you to apply! We value inclusivity, welcoming candidates from diverse backgrounds, including non-traditional paths. Unique experiences enrich our team, and the willingness to dream big makes you an exceptional candidate!

Work Personas

We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work. Learn more here.

Equal Opportunity Employer

ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements. 

Accommodations

We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact [email protected] for assistance. 

Export Control Regulations

For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities. 

From Fortune. ©2024 Fortune Media IP Limited. All rights reserved. Used under license.