Insider Threat Data Protection Engineer

Company Description

It all started in sunny San Diego, California in 2004 when a visionary engineer, Fred Luddy, saw the potential to transform how we work. Fast forward to today — ServiceNow stands as a global market leader, bringing innovative AI-enhanced technology to over 8,100 customers, including 85% of the Fortune 500. Our intelligent cloud-based platform seamlessly connects people, systems, and processes to empower organizations to find smarter, faster, and better ways to work. But this is just the beginning of our journey. Join us as we pursue our purpose to make the world work better for everyone.

Job Description

What you get to do in this role:

The Global Incident Response (GIR) team consists of five units: Triage, Investigations, Incident Command, Threat Hunting and Insider Threat. You will be joining the Insider Threat program. As a Business Systems Analyst, you will be part of ServiceNow's risk reduction for insider threats team and help identify insider threat scenarios.

• Be part of Insider Threat programs in alignment with industry best practices and regulatory requirements.
• Collaborate with stakeholders and team members to schedule meetings, capture action items, and ensure effective communication and follow-up.
• Assist in maintaining metrics, dashboards, and reports to track threat detection and mitigation activities.
• Participate in initiatives to strengthen the security of the ServiceNow platform, infrastructure, and customer environments.
• Help drive awareness and training activities that promote a strong security culture across the organization.
• Maintain and update documentation, playbooks, and standard operating procedures related to Insider Threat and Threat Hunting.
• Support project coordination tasks, ensuring deliverables are aligned with defined priorities, timelines, and quality standards.
• Conduct insider threat investigations by collecting evidence, analyzing user activity, and preparing summaries for review

Qualifications

A successful candidate will have:

• 4+ years of experience as a Data Engineer or similar role.
• Strong motivation to learn, contribute, and support ongoing program initiatives.
• Clear and effective oral and written communication skills.
• Good understanding of data labelling, data categorization.
• Ability to manage and analyze datasets with strong attention to detail and accuracy.
• Experience collaborating with cross-functional teams, including security and IT stakeholders.
• Exposure to incident response processes in a corporate or enterprise environment.
• Basic understanding of the security incident response lifecycle and related workflows.

Good to Have:

• Experience or exposure to application security concepts, especially in large-scale or SaaS environments.
• Experience in leveraging or critically thinking about how to integrate AI into work processes, decision-making, or problem-solving. This may include using AI-powered tools, automating workflows, analyzing AI-driven insights, or exploring AI's potential impact on the developer productivity
• Familiarity with security incident handling and escalation processes.
• Understanding of cybersecurity frameworks such as MITRE ATT&CK.
• Experience working in Agile or cross-functional team environments.
• General awareness of multiple security domains (e.g., engineering, architecture, governance) and how they interconnect.
• Interest in continuously learning about evolving threats and improving detection and response capabilities.

Additional Information

Work Personas

We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service.

Equal Opportunity Employer

ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements.

Accommodations

We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact for assistance.

Export Control Regulations

For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities.

From Fortune. 2025 Fortune Media IP Limited. All rights reserved. Used under license.