DevSecOps Cloud Native Engineer

The Product Security team at ServiceNow is dedicated to embedding security throughout the Software Development Lifecycle (SSDL). The DevSecOps team plays a crucial role in building, integrating, and scaling security services to simplify security activities for thousands of internal customers.

As a DevSecOps Cloud Native Engineer in Hyderabad, Telangana, India, you will be instrumental in deploying, integrating, and scaling cloud-native services to support critical security functions such as SAST, DAST, SCA, and Enterprise Container Security across ServiceNow. You will also develop ServiceNow applications for the Product Security team to enhance security operations at scale, aiming to improve the work experience for engineers, IT developers, and operations teams. This role involves close collaboration with build engineering and infrastructure operations to deploy and maintain scalable containerized system images for application security toolchains.

Key responsibilities include:

• Developing and maintaining automations for on-demand autoscaling services utilizing Kubernetes and AWS.
• Integrating vulnerability management services into Jenkins build jobs and the ServiceNow Application Lifecycle Management (ALM) platform.
• Supporting the Security Champions Program by facilitating CI/CD integrations.

To excel in this role, you should possess:

• Experience in leveraging or critically assessing the integration of AI into work processes, decision-making, or problem-solving, including the use of AI-powered tools, workflow automation, and analysis of AI-driven insights.
• A minimum of 2 years of experience as a build engineer or software engineer, with expertise in dependency management tools (e.g., Maven, NPM) and CI/CD platforms (e.g., Jenkins).
• Hands-on experience in software engineering tasks spanning the entire application or feature lifecycle, including design, development, testing, and deployment.
• Demonstrated ability to prioritize and value tasks that improve team efficiency and speed, with appropriate guidance.
• Experience collaborating with internal and adjacent teams to resolve complex problems.
• At least 1 year of experience with Cloud Infrastructure, specifically AWS (experience with Azure and GCP is advantageous) and Infrastructure as Code tools like Terraform.
• At least 1 year of experience with Cloud Native technologies such as Containers and Kubernetes, along with operations tools like Prometheus, ELK, and Grafana.
• At least 1 year of scripting experience, preferably with Groovy and Python.
• Knowledge of static application security testing (SAST), dynamic application security testing (DAST), and software composition analysis (SCA) toolchains is a plus.
• Experience with functional testing frameworks like Selenium, Geb, or Spock is also a plus.
• A Bachelor of Science in Computer Science or equivalent practical work experience.