Senior Information Security Analyst

About the role

The Global Security Support Centre (GSSC) acts as the primary interface for security-related matters, protecting the platform and our customers. You will manage security incidents, investigate threats, and communicate directly with stakeholders to maintain trust and operational excellence.

Key facts

What you'll do

• Represent the security organization during customer-facing security incidents, privacy inquiries, and technical investigations.
• Triage and resolve security matters while maintaining clear communication with internal and external stakeholders.
• Develop and improve security process documentation and capability maturity models.
• Create training programs to educate customers and internal teams on security best practices.
• Design and implement AI-driven solutions to automate repetitive security tasks.
• Participate in an on-call rotation, including after-hours, weekends, and public holidays.
• Collaborate with the Legal department on privacy and security issues across global time zones.

Requirements

• 3-5+ years of professional experience in information security or application security, or equivalent education.
• Bachelor degree in computer science, information security, or related field.
• Must hold ServiceNow Certified System Administrator (CSA) certification.
• Proficiency in Java or JavaScript with the ability to interpret and explain code.
• Deep understanding of cloud computing models and hyperscaler environments.
• Knowledge of compliance frameworks such as NIST, CIS, GDPR, HIPAA, PCI DSS, and ISO.
• Ability to explain complex security risks to non-technical audiences.

Nice to have

• Two or more of the following: Azure AI Fundamentals, AWS Certified AI Practitioner, OSWA, GWAPT, GSEC, GCIH, CISSP, or CISM.
• Hands-on experience with web-based vulnerability exploitation.

Skills & tools

• Security infrastructure: SIEM, logging tools, load balancers, firewalls, WAF, IDS/IPS, and encryption.
• Web proxy tools for security testing.
• Application security: OWASP Top Ten and mitigation strategies.
• Vulnerability management platforms.

Practical notes

• Compensation includes 401(k) match, ESPP, health plans, flexible time away, and family leave.
• This role requires flexibility to work across different time zones as part of a global team.
• Employment is subject to export control regulations; ServiceNow may need to secure export licenses for certain candidates.
• For application accommodations, contact globaltalentss@servicenow.com.