Description

Key Skills: Containers, Kubernetes, CI/CD, Jenkins, AWS, Cloud Infrastructure, Terraform, Python, Groovy, DevSecOps

Good to Have Skills: Azure and GCP cloud platforms, Nexus or Artifactory experience, AI models and Amazon Bedrock, static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA) tool chains

Roles & Responsibilities:

• Design, develop, operate, and scale Enterprise Container Security program providing container security services across ServiceNow
• Apply container security knowledge to containerized services for SAST, DAST, and SCA by helping with development, deployment, integration, and scale
• Identify security vulnerabilities within the platform as an engineer on the ServiceNow Application Security Team
• Interface with external researchers and customers that perform security assessments against ServiceNow for vulnerability management
• Run dynamic security testing tools, plan security projects, and serve as a security advocate within the organization
• Effectively report security issues to application owners and provide meaningful remediation recommendations for vulnerability resolution
• Validate that security issues have been properly resolved and maintain documentation of security improvements
• Work closely with Security Organization, Build Engineering, Tools Engineering and Infrastructure Operations teams for program development

Experience Required: 2+ years of experience as a build engineer or developer using Containers and Kubernetes within CI/CD platforms, 2+ years of experience securing containerized workloads on Kubernetes, 2+ years of experience with public cloud environments (AWS required), 2+ years of Cloud Infrastructure experience with Infrastructure as Code, 1+ years of scripting experience in Groovy and Python, 1+ years of experience with Nexus or Artifactory

Education: Bachelor's degree in Computer Science or equivalent work experience

Key Skills

Education

Any Graduate