Staff Information Security Analyst

About the role

ServiceNow's Security Organization (SSO) is looking for a Staff Information Security Analyst in Toronto. The Global Security Support Center (GSSC) provides external and internal security support to strengthen customers' security posture and build trust. The role covers security incidents, cases, findings and escalations, and requires availability for the on-call rotation.

Key responsibilities

• Represent the security organization in customer-facing security incidents, cases, findings, tasks, questions and calls.
• Triage, investigate and respond to security matters of the ServiceNow platform, keeping customers informed and improving their experience.
• Act as the main point of contact for security matters, supporting internal and external stakeholders.
• Facilitate the triage of security incidents and cases with customers and internal teams.
• Manage customer outreach communications and escalation handling.
• Deliver security awareness training and enablement programs for internal and external customers.
• Develop AI solutions to automate repetitive activities and design new AI-based solutions.
• Work with Legal on security and privacy matters and collaborate with a global team across time zones.
• Be available for the on-call rotation (weekends, public holidays and after hours) as rostered.
• Access to a Protected B cloud environment is required; clearance is a condition of employment.

Required profile

• Minimum of 8 years of professional experience in information security or application security, or similar experience with education.
• Eligibility to obtain and hold a reliability status in Canada; clearance is a condition of employment.
• Preferred: Bachelor's degree in computer science, information security or a related field.
• Preferred: hands-on experience with web-based vulnerability exploitation.

Required skills

• Cloud computing models and major hyperscaler clouds.
• SIEM, logging tools, load balancers, firewalls, WAFs, IDS/IPS, vulnerability management and encryption.
• Java/JavaScript at basic to intermediate level.
• Web proxy tools for security testing and assessments.
• OWASP Top Ten and web application vulnerabilities.
• NIST, CIS, GDPR, HIPAA, PCI DSS and ISO standards.
• Experience with AI technologies and designing AI-based solutions.

What we offer

• Base pay of $109,400 - $191,500, plus equity (when applicable), variable/incentive compensation and benefits.
• Health plans, flexible spending accounts, ESPP, matching donations, a flexible time away plan and family leave programs.