ServiceNow · 1 month ago
Senior Staff Security Incident Commander | Security Org
United States
Full-time
Remote
Lead/Staff
$166K/yr - $290K/yr
12+ years expServiceNow is a leading provider of innovative AI solutions for business reinvention. They are seeking a Senior Staff Security Incident Commander to lead incident response strategies and communications during critical security incidents, ensuring the protection of both the company and its customers.
Artificial Intelligence (AI)Enterprise SoftwareCloud ComputingLegalCyber SecuritySaaSAgentic AIBusiness Process Automation (BPA)Cloud ManagementComplianceRobotic Process Automation (RPA)
Responsibilities
Orchestration of response and remediation of incident response for highest criticality security events
Take ownership and lead response to critical incidents within the company
Establish and mature documentation surrounding protocols and procedures governing the security incident command team
Prepare and deliver communications, including executive summaries and incident briefings, to key stakeholders during and after incident response
Conduct rapid response, mitigation, and investigations on the highest priority cases impacting ServiceNow and user data
Partner with the team members across multiple regions to drive response and investigations globally
Organization and facilitation of scenario-based exercises to test and improve incident management and response strategies
Maintenance of existing playbooks and procedures, as well as developing new ones, to further standardize SIC and its partners' responses when verifying MSIs
Contribute to the organization and completion of Post-Incident Reviews (PIRs) and Root Cause Analyses (RCAs) following major security incidents
Identify new ways to simplify, integrate, automate and refine the major security incident process to better support internal and external stakeholders
Qualification
Required
Experience in leveraging or critically thinking about how to integrate AI into work processes, decision-making or problem-solving. This may include using AI-powered tools, automating workflows, analyzing AI-driven insights, or exploring AI's potential impact on the function or industry
12+ years of total cybersecurity professional experience or similar experience with education
5–8+ years of deep domain expertise in incident response and/or incident management
Experience leading or supporting complex security incidents to resolution end-to-end
Excellent verbal and written communication skills (English)
Comfort communicating complex topics in a clear and concise manner to different tiers of audiences (highly technical, less technical, executives, practitioners)
Problem-solving and decision-making skills
Ability to quickly and accurately assess a situation, identify and prioritize risks, and make sound decision
Familiarity with cybersecurity principles and frameworks (e.g. MITRE ATT&CK)
Preferred
Knowledge across multiple security domains is a plus
Experience planning and/or orchestrating tabletop exercises is a plus
Benefits
Equity (when applicable)
Variable/incentive compensation
Health plans, including flexible spending accounts
A 401(k) Plan with company match
ESPP
Matching donations
A flexible time away plan
Family leave programs
Full relocation costs are provided by ServiceNow
Company
ServiceNow
ServiceNow is an AI platform that delivers IT operations, field service management and app engine solutions.
10001+ employees
H1B Sponsorship
ServiceNow has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
71%
Represents job field similar to this job
Engineering and Development
Product Management
Customer Service and Support
Management and Executive
Accounting and Finance
Creatives and Design
Marketing
Sales
Human Resources
Legal and Compliance
Arts and Entertainment
Trends of Total Sponsorships
*2026 (308)
2025 (910)
2024 (876)
2023 (807)
2022 (840)
2021 (447)
2020 (439)
Funding
Current Stage
Public CompanyTotal Funding
$4.08BKey Investors
Sequoia CapitalJMI Equity
2026-04-17Post Ipo Debt· $4B
2022-12-09Post Ipo Equity
2012-07-29IPO
Leadership Team
William McDermott
Chairman and CEO
Pat Casey
Chief Technology Officer & EVP of DevOps
Recent News
The Motley Fool
2026-07-11
2026-07-10
Company data provided by crunchbase