Who you are

• This position requires a blend of technical expertise, strategic thinking, and effective communication to drive a strong security culture and influence change across the organization
• Proven experience in red teaming and/or penetration testing within large organizations
• Strong technical skills in offensive security with experience testing public cloud, Kubernetes, Active Directory, and Generative AI systems
• Excellent communication skills, with the ability to effectively engage with stakeholders at all levels
• Demonstrated ability to create detailed test plans and lead complex testing engagements
• A proactive mindset, with a passion for driving change and strengthening security culture
• Typically requires a minimum of 8 years of related experience; a Masters degree with 6 years of experience in cyber security, with a focus on red teaming and penetration testing
• Deep understanding of cyber security principles and best practices
• Experience with scripting and programming languages (e.g., Python, PowerShell, Bash)
• DevOps experience is a plus
• Experience in leveraging or critically thinking about how to integrate AI into work processes, decision-making, or problem-solving. This may include using AI-powered tools, automating workflows, analyzing AI-driven insights, or exploring AI's potential impact on the function or industry

What the job involves

• The ServiceNow Security Organization (SSO) delivers world-class, innovative security solutions to reduce risk and protect the company and our customers
• We enable our customers to migrate their most sensitive data and workloads to the cloud, accelerating our business so that we are the most trusted SaaS provider
• We create an environment where our employees are proud to work and can make a positive impact
• ServiceNow is dedicated to delivering innovative solutions while maintaining the highest standards of security. Our Red Team plays a crucial role in safeguarding our assets through real-world attack simulations and collaborative defense strategies
• We are seeking a highly skilled and experienced Staff Red Team Engineer to join our Red Team
• In this role, you will be responsible for executing sophisticated red team engagements to identify vulnerabilities within our systems, networks, and applications
• Through these engagements, you will demonstrate viable paths an attacker might take to breach our defenses
• You will also lead more narrowly scoped penetration tests against internal services and generative AI systems
• Develop comprehensive test plans and strategies for security assessments, ensuring thorough coverage of critical assets and systems
• Communicate findings, risks, and recommendations to stakeholders at various levels within the organization, translating technical issues into business impacts
• Collaborate with security and development teams to prioritize and remediate identified vulnerabilities
• Stay abreast of the latest cyber security threats, trends, and attack techniques; continuously improve our testing methodologies and tools
• Mentor and guide team members, fostering a culture of continuous learning and improvement within the Red Team

Benefits

• Commuter benefits
• Annual learning stipends
• Work from home opportunities
• Generous family leave
• Matched donations
• Flexible PTO
• 401(k) matching
• Paid volunteer time