Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
Tailor your resume to this Staff Incident Response Engineer role.
Rezi rewrites your resume against ServiceNow's job description. Free.
Tailor your resume to this Staff Incident Response Engineer role.
Rezi rewrites your resume against ServiceNow's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Staff Incident Response Engineer posting at ServiceNow — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Staff Incident Response Engineer posting at ServiceNow — free, in seconds.
About the Role
This Staff Incident Response Engineer role supports ServiceNow’s Cyber Investigation, Response & Automation Team, focusing on both commercial and regulated-market customer environments in Canada. You will monitor defense tools and systems, analyze events, and improve response efficiency while maintaining high quality.
Responsibilities
- Monitor tools and systems defending ServiceNow’s production and regulated environments, and correlate seemingly unrelated events
- Lead incident response and track incidents to closure across functional teams
- Respond to account-level threats and attacks against customer environments
- Produce post-incident reports, forensic reports, and remediation plans
- Support audits, compliance requirements, and regulatory investigations
- Build and maintain incident response playbooks, handbooks, and cybersecurity standards
- Maintain secure configuration baselines for devices and analyze vulnerabilities
- Serve as an escalation point and participate in the on-call rotation, including after-hours and weekends
- Assist with the deployment, integration, and configuration of new or enhanced security solutions
Requirements
- 7 to 10+ years of related experience, or an equivalent mix of education and experience
- Experience working in Canadian regulated markets, such as financial services or public sector is highly desirable
- Deep understanding of Security Operations Center and Security incident response protocols and procedures
- Extensive experience in incident response, digital forensics, threat hunting, and threat intelligence
- Solid networking foundation, including TCP/IP and core protocols
- Experience with SIEM platforms such as Splunk, plus EDR and SOAR tools
- Ability to analyze event and system logs, perform host and memory forensics on Windows, macOS, and/or Linux, and examine malware
- Experience writing internal playbooks, handbooks, and incident response frameworks
- Knowledge of attack vectors, threat tactics, and attacker techniques
- Knowledge of cloud security concepts and experience in AWS, Azure, or GCP
- Coding or scripting experience in one or more general-purpose languages
- Working knowledge of Canadian regulatory requirements for financial services and public sector clients
- Experience in leveraging or critically thinking about how to integrate AI into work processes, decision-making, or problem-solving
- Excellent written and verbal communication, including the ability to explain incidents to executives and customers
- Willingness to work weekend and after-hours shifts for responding to priority incidents in a timely manner
Skills
- AI integration into work processes
- Automation knowledge (Python, bash scripting)
- Hardening Linux, Windows, or Mac systems
- Data logging applications (e.g. Splunk)
- Vulnerability scanning tools (Qualys, Nessus)
- Defensive security mindset
- Explaining complex issues to executives and customers
- GSEC, GCIH, CEH, GCIA or CISSP certifications
- SIEM platforms (Splunk)
- EDR and SOAR tools
- Host and memory forensics
- Malware examination
- Cloud security concepts (AWS, Azure, or GCP)
- Coding or scripting
- Canadian regulatory requirements for financial services and public sector clients
- GCIH, GCFA, GCIA, GMON, GSEC, CISSP, or CEH certifications
- ServiceNow platform knowledge
Location
- Canada
Work Type
- Flexible
- Remote
Experience Level
- 6+ years related experience
- 7 to 10+ years of related experience
Salary/Compensations
- $109,400 - $191,500
Benefits
- Equity (when applicable)
- Variable/incentive compensation
- Health plans
- Flexible spending accounts
- ESPP
- Matching donations
- Flexible time away plan
- Family leave programs
About the Company
- ServiceNow is the AI control tower for business reinvention, bringing together AI, data, and workflows to help businesses work smarter, faster, and better.
- We are building an AI-native culture where technology and talent are unstoppable together.
- The ServiceNow Security Organization (SSO) delivers world-class, innovative security solutions to reduce risk and protect the company and our customers.
- We enable customers to migrate sensitive data and workloads to the cloud, accelerating business to be the most trusted SaaS provider.
- We create an environment where employees are proud to work and can make a positive impact.
Equal Opportunity
- ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, gender identity, veteran status, or any other category protected by law.
- All qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements.