Staff Incident Response Engineer Canada

Protect ServiceNow production environments in Canada through incident response, threat hunting, and security automation expertise. Support commercial and regulated-market customers.This Staff Incident Response Engineer serves Cyber Investigation, Response & Automation within the ServiceNow Security Organization. The role monitors defensive tools, correlates events, and leads customer incident response. It requires digital forensics, threat intelligence, SIEM, and cloud security knowledge.Key Responsibilities:
Monitor defensive tools across production and regulated environmentsLead customer incident response and track incidents to closureProduce forensic reports, post-incident reports, and remediation plansMaintain playbooks, handbooks, standards, and configuration baselinesSupport audits, investigations, deployments, and on-call escalationRequirements:
Seven to ten or more years related experienceIncident response, threat hunting, and digital forensics expertiseSplunk, EDR, SOAR, and vulnerability scanning experiencePython or bash scripting and systems hardening knowledgeEligibility for Government of Canada Reliability Status screeningBring defensive security leadership, forensic analysis, and automation skills to ServiceNow’s Canadian incident response team.
#J-18808-Ljbffr