Product DevSecOps Security Engineer
- Hyderabad, Telangana
- Permanent
- Full-time
- As an engineer on the ServiceNow Application Security Team, you will be responsible in identifying security vulnerabilities within our platform.
- In this role, you will interface with external researchers and customers that perform security assessments against ServiceNow.
- You will have the opportunity to run dynamic security testing tools, plan projects, and be a security advocate.
- A key part of this position is to effectively report issues to application owners, provide meaningful remediation recommendations, and validate that issues have been resolved.
- Solid Experience in Infrastructure & Security in AWS is required
- 2+ years prior experience in web security/strong familiarity with OWASP and expertise in Docker, Kubernetes, AWS, security scanning, and deployment tools like Jenkins within infrastructure environments.
- Experience in Container Security Scanning
- Experience in SCA (Software Composition Analysis)
- Understanding of information security
- Previously managed a bug bounty or responsible disclosure program.
- Strong understanding of web and mobile application security assessment techniques.
- Ability to articulate complex issues to executives and customers.
- Experience working with the ServiceNow Platform a plus.
- Security certifications a plus.