Staff Detection Engineer at ServiceNow

| Remote
Sorry, this job was removed at 6:41 p.m. (CST) on Monday, July 20, 2020
Find out who's hiring in Chicago.
See all Developer + Engineer jobs in Chicago
Apply now
By clicking continue you agree to Built In’s Privacy Policy and Terms of Use.

Description

ServiceNow is changing the way people work. With a service-orientation toward the activities, tasks and processes that make up day-to-day work life, we help the modern enterprise operate faster and be more scalable than ever before.

 

ServiceNow is looking to expand its Telemetry capabilities with an additional Detection Engineer. As a member of the Telemetry Engineering team you will drive security alerting into production for Security Operations. The primary role of the content engineer is to have total oversight of all things telemetry. This ownership includes creation of new alerts/dashboards, troubleshooting complex alert query fixes, managing development workflow, tracking change control, and adherence to regulatory obligations. This role will special will specialize in user behavior analytics (UBA) with a direction to build anomaly detection and complex threat modeling. 

 

Duties and Responsibilities:

  • Configure UBA anomaly and threat modeling detections.
  • Assist with the entire Telemetry creation and change management from beginning to end.
  • Collaborate with fellow cyber threat intelligence analysts and threat hunters teammates on new use cases.
  • Troubleshoot advanced query logic and work with various teams to derive the best solution.
  • Create initial alert queries and validate output with stakeholders.
  • Implement changes to existing alert queries for performance improvements, threshold adjustments or exclusion filters.
  • Triage and prioritize telemetry requests based off risk, impact and complexity.
  • Deploy telemetry changes into production using a formalized process, to include ServiceNow Security Operations module integration for security incident creation.
  • Provide telemetry item’s purpose to the documentation support analyst.
  • Maintain telemetry inventory for regulatory and compliance audits.
  • Coordinate with incident response team with telemetry needs for security investigations.
  • Create meaningful dashboards for detection patterns or behavior monitoring. This will sometimes require statistical analysis or advanced visualizations.
  • Track progress and escalate problem areas when needed.

 

In order to be successful in this role, we need someone who has:

  • 3-5 years’ experience in information security. Preferably in the domains of Security Operations or Security Engineering.
  • 2 years minimum of using Splunk Search Processing Language (SPL). 
  • Experience writing UBA detection rule writing.
  • Prior experience with SIEM technology and log aggregation applications.
  • Project management skills in order to track multiple updates with an organized method.
  • Ability to understand various log types from a variety of sources such as network devices, operating systems and application specific logs.
  • Proficient regex pattern matching skills.
  • Knowledge of MITRE ATT&CK Matrix is a bonus.
  • Familiar with effective visualizations and dashboarding fundamentals.
  • Concise verbal and written communication skills.
  • Experience with the ServiceNow platform is a bonus.
  • Experience with the Securonix is a bonus.

 

Candidates must be able to meet all federal government security screening requirements as indicated: Federal security screening requirements call for applicant to verify U.S. Citizenship. Additional customer screening requirements may include additional items such as, but not limited to: specialized agency background checks (either national or local) and fingerprinting, as well as the ability to obtain a government personnel security clearance.

We provide competitive compensation, generous benefits and a professional atmosphere. This is a very collaborative and inclusive work environment where individuals strong on aptitude and attitude will have an opportunity to grow their professional careers through working with some of the most advanced technology and talented developers in the business.

 

 

 

ServiceNow is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, gender identity, or veteran status. If you are an individual with a disability and require a reasonable accommodation to complete any part of the application process, or are limited in the ability or unable to access or use this online application process and need an alternative method for applying, you may contact us at (408) 501-8550, or [email protected] for assistance.

Read Full Job Description
Apply now
By clicking continue you agree to Built In’s Privacy Policy and Terms of Use.

Technology we use

  • Engineering
  • Product
    • JavaLanguages
    • JavascriptLanguages
    • RubyLanguages
    • SqlLanguages
    • jQueryLibraries
    • ReactLibraries
    • ReduxLibraries
    • AngularJSFrameworks
    • Maria DBDatabases
    • MySQLDatabases
    • OracleDatabases
    • Google AnalyticsAnalytics
    • PiwikAnalytics
    • Adobe AnalyticsAnalytics
    • BalsamiqDesign
    • IllustratorDesign
    • InVisionDesign
    • PhotoshopDesign
    • SketchDesign
    • ServiceNowManagement

Location

Before COVID, we were in a new building on Lake and Racine in the West Loop. Right now we're physically distanced but trying to stay social connected!

An Insider's view of ServiceNow

What’s the vibe like in the office?

You make decisions every day that help people. My work makes a big difference, and that’s satisfying.

Medha

Senior Application Developer

What projects are you most excited about?

I wanted to work at a growing company. We're focused, customer-centric, and you can't beat the platform.

Olum

Project Manager

What are some things you learned at the company?

Our purpose is empowering. The company's putting a lot into the culture, the employees - they're investing in us.

Marina

Creative Director

What is your vision for the company?

Amazing products that create great employee and customer experiences and make work, work better, is our passion.

CJ

Chief Product Officer

What is your vision for the company?

Taking a long-range view, we've got the spirit of a start-up and the resources to deliver with high quality.

Preetam

Software Engineer

What are ServiceNow Perks + Benefits

ServiceNow Benefits Overview

We make work better for people—including our own. From work environments that help us do our best work, to benefits and a culture that encourage employees to stay healthy, happy, engaged, and growing, we keep our people at the center of everything we do.

Culture
Volunteer in local community
Full-time employees get 20 hours per year to volunteer with the non-profit of their choice.
Friends outside of work
Eat lunch together
Daily stand up
Open door policy
Team owned deliverables
Team based strategic planning
Group brainstorming sessions
Pair programming
Open office floor plan
Diversity
Dedicated Diversity/Inclusion Staff
Diversity manifesto
Someone's primary function is managing the company’s diversity and inclusion initiatives
Health Insurance & Wellness Benefits
Flexible Spending Account (FSA)
Disability Insurance
Dental Benefits
Vision Benefits
Health Insurance Benefits
Life Insurance
Onsite Gym
Retirement & Stock Options Benefits
401(K)
401(K) Matching
Starting in 2019
Company Equity
Employee Stock Purchase Plan
Purchase company stock at a 15% discount semi-annually
Performance Bonus
Match charitable contributions
Child Care & Parental Leave Benefits
Generous Parental Leave
Starting in 2019 - 20 weeks for birthing parent, 12 weeks for non-birthing parent
Remote Work Program
Work remotely on occasion as needed.
Adoption Assistance
Vacation & Time Off Benefits
Unlimited Vacation Policy
Generous PTO
Paid Volunteer Time
Starting in 2019 - 20 hours a year starting in 2019
Paid Holidays
Paid Sick Days
Perks & Discounts
Beer on Tap
With an in house craft beer geek procuring
Casual Dress
Commuter Benefits
Pre-tax contribution plan for commuter expenses - transit and parking
Company Outings
Site social activities periodically
Free Daily Meals
Free breakfast offered daily
Game Room
Shuffle board, pool table, table games and more!
Stocked Kitchen
Some Meals Provided
Happy Hours
Every Thursday!
Professional Development Benefits
Job Training & Conferences
LinkedIn Learning access, numerous internal training programs, conference attendance options
Tuition Reimbursement
Up to $5,250 reimbursed annually for qualified expenses
Diversity Program
Lunch and learns
Continuing Education stipend
We offer $5000 annualy for continuing education.
Online course subscriptions available
Paid industry certifications
More Jobs at ServiceNow54 open jobs
All Jobs
Finance
Data + Analytics
Design + UX
Dev + Engineer
Operations
Product
Project Mgmt
Sales
Content
Sales
new
Remote
Project Mgmt
new
Remote
Product
new
Chicago
Developer
new
Chicago
Project Mgmt
new
Chicago
Developer
new
Chicago
Content
new
Remote
Developer
new
Chicago
Data + Analytics
new
Chicago
Project Mgmt
new
Chicago
Developer
new
Chicago
Design + UX
new
Chicago
Operations
new
Chicago
Developer
new
Chicago
Design + UX
new
Chicago
Project Mgmt
new
Remote
Developer
new
Remote
Data + Analytics
new
Chicago
Data + Analytics
new
Chicago
Data + Analytics
new
Chicago
Developer
new
Remote
Project Mgmt
new
Chicago
Project Mgmt
new
Remote
Operations
new
Chicago
Project Mgmt
new
Remote
Apply now
By clicking continue you agree to Built In’s Privacy Policy and Terms of Use.
Save jobView ServiceNow's full profileSee more ServiceNow jobs