Senior Security Engineer – ServiceNow Security & Threat Modelling (Remote)

Job Title : Senior Security Engineer – ServiceNow Security & Threat ModellingExperience : 6+ YearsLocation : RemoteType : ContractJob Summary :We’re looking for a Senior Security Engineer to strengthen our ServiceNow ecosystem with security-by-design.You will lead threat modelling, perform security design reviews, embed security in SDLC, and ensure risks are mitigated across applications and integrations.Mandatory Skills :ServiceNow platform security, threat modelling (STRIDE/PASTA), SAST/DAST (Checkmarx/Veracode/Burp/ZAP), API security, OAuth/SAML/SSO, secure CI/CD, JavaScript/Python.Key Responsibilities :Drive threat modelling, design reviews, and risk assessments.Implement & manage SAST/DAST, secure CI/CD pipelines, and automated scans.Collaborate with Dev/DevOps teams to instill secure coding practices.Document findings, conduct vendor reviews & support ITIL-driven processes.Mentor teams on modern security tools and emerging threats.Required Skills :Strong expertise in ServiceNow platform security & architecture.Hands-on with threat modelling (STRIDE/PASTA, attack trees).Experience using SAST/DAST tools (Checkmarx, Veracode, Burp Suite, OWASP ZAP).Proficiency in API & Web Security, OAuth, SAML, SSO.Knowledge of secure CI/CD pipelines & automation.Strong coding skills in JavaScript/Python.Excellent troubleshooting & analytical abilities for distributed systems.Nice-to-Have :Certifications: CISSP, CEH, OSCP, CSSLP, ServiceNow Specialist.Knowledge of cloud security (AWS/Azure/GCP) & compliance frameworks (ISO, SOC2, GDPR).Experience with incident response, forensics, SIEM tools.