Staff Incident Response Engineer
$109.4k - $191.5k per yearVulnU
- Staff Incident Response EngineerServiceNow · servicenow.comCategory: Incident Response / DFIRLocation: RemoteLevel: Staff / PrincipalSalary: $109,400 – $191,500## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* Paid parental leave* Equity* Retirement match* Learning budgetEligibility:Due to Government of Canada regulatory requirements, this position requires the successful completion of a Government of Canada Reliability Status screening as a condition of employment. The screening process requires 5 years of verifiable background history.This includes identity verification, education verification, a criminal record check, and a credit check. Candidates must be eligible to obtain and maintain Reliability Status, which generally requires Canadian citizenship or Canadian permanent resident status. This role may require security clearance in the future. Employment is contingent upon successful completion and maintenance of the required screening.Rotational and Non-Standard Hours: This role may require participation in a rotational schedule that includes non-standard business hours, weekends, and statutory holidays as the team provides 24x7 operational support.The ServiceNow Security Organization (SSO)The ServiceNow Security Organization (SSO) delivers world-class, innovative security solutions to reduce risk and protect the company and our customers. We enable our customers to migrate their most sensitive data and workloads to the cloud, accelerating our business so that we are the most trusted SaaS provider. We create an environment where our employees are proud to work and can make a positive impactKey ResponsibilitiesMonitor the tools and systems that defend ServiceNow’s production and regulated environments, and correlate seemingly unrelated eventsLead response to incidents affecting our customers, and track incidents to closure across functional teamsRespond to account-level threats and attacks against our customer environmentsProduce post-incident reports, forensic reports, and remediation plansSupport audits, compliance requirements, and regulatory investigationsBuild and maintain incident response playbooks, handbooks, and cybersecurity standardsMaintain secure configuration baselines for devices under direct control (security tools) and those that aren’t (workstations, servers, network devices), and analyze vulnerabilities using that dataServe as an escalation point and participate in the on-call rotation, including after-hours and weekends that might be out of standard business hoursAssist with the deployment, integration and initial configuration of new security solutions or enhancements to existing security solutions; including network, and systems to improve overall security postureTo be successful in this role you have:Experience in leveraging or critically thinking about how to integrate AI into work processes, decision-making, or problem-solving. This may include using AI-powered tools, automating workflows, analyzing AI-driven insights, or exploring AI's potential impact on the function or industry.6+ years related experience or equivalent combination of education and experienceAutomation knowledge (Python, bash scripting) and experience hardening Linux, Windows, or Mac systemsBackground working with data logging applications (e.g. Splunk)Knowledge of vulnerability scanning tools (Qualys, Nessus)A defensive security mindsetAbility to explain complex issues to executives and customersGSEC, GCIH, CEH, GCIA or CISSP certifications are a plusRequirements:7 to 10+ years of related experience, or an equivalent mix of education and experienceExperience working in Canadian regulated markets, such as financial services or public sector is highly desirableDeep understanding of Security Operations Center and Security incident response protocols and proceduresExtensive experience in incident response, digital forensics, threat hunting, and threat intelligenceSolid networking foundation, including TCP/IP and core protocolsExperience with SIEM platforms such as Splunk, plus EDR and SOAR toolsAbility to analyze event and system logs, perform host and memory forensics (including live response) on Windows, macOS, and/or Linux, and examine malwareExperience writing internal playbooks, handbooks, and incident response frameworksKnowledge of attack vectors, threat tactics, and attacker techniquesKnowledge of cloud security concepts and experience in AWS, Azure, or GCPCoding or scripting experience in one or more general-purpose languagesWorking knowledge of Canadian regulatory requirements for financial services and public sector clientsExperience in leveraging or critically thinking about how to integrate AI into work processes, decision-making, or problem-solving. This may include using AI-powered tools, automating workflows, analysing AI-driven insights, or exploring AI’s potential impact on the function or industryExcellent written and verbal communication, including the ability to explain incidents to executives and customersWillingness to work weekend and after-hours shifts for responding to priority incidents in a timely mannerNice to have:GCIH, GCFA, GCIA, GMON, GSEC, CISSP, or CEH certifications, and ServiceNow platform knowledge are a plus.#SecurityJobsFor positions in this location, we offer a base pay of $109,400 - $191,500, plus equity (when applicable), variable/incentive compensation and benefits. Sales positions generally offer a competitive On Target Earnings (OTE) incentive compensation structure. Please note that the base pay shown is a guideline, and individual total compensation will vary based on factors such as qualifications, skill level, competencies, and work location. We also offer health plans, including flexible spending accounts, ESPP, matching donations, a flexible time away plan and family leave programs.Compensation is based on the geographic location in which the role is located and is subject to change based on work location.Work PersonasWe approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service.Equal Opportunity EmployerServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, gender identity, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements. AccommodationsWe strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact View email address on apply.j-vers.com for assistance.Export Control RegulationsFor positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities.
- J-18808-Ljbffr
Vacancy posted 16 hours ago
Similar jobs that could be interesting for youBased on the Staff Incident Response Engineer in Ottawa, ON vacancy
- Lead incident response at ServiceNow remotely, using digital forensics and threat hunting to protect production and regulated environments. As a Staff or Principal engineer, you will monitor defensive tools, correlate events, and lead customer-impacting incident response. The...SuggestedRemote work
VulnU
Ottawa, ON16 hours ago - About Fullscript We’re an industry-leading health technology company on a mission to help people get better. We started in 2011 with one simple idea. Make it easier for practitioners to access the products they trust so they can deliver better care. That simple idea grew into...SuggestedFull time
$140k - $170k per year
CyberClan provides enterprise security, and human response to small and midsize enterprises and channel partners through comprehensive risk... ...a DFIR Manager who will be leading a high-performing Security Incident Response function, overseeing cross-functional investigations, incident...SuggestedFull timeRemote workFlexible hoursCyberClan
Ottawa, ON16 hours ago- ...elite security leaders deliver rapid responses for over 3,000 incidents per year and have the resources and expertise... ...work alongside accomplished senior staff, enhancing your own DFIR expertise... ...and expertise: Malware Reverse Engineering Network Security Computer Security...Suggested
Kroll
Ottawa, ON16 hours ago - ...Incident Response Analyst (AI Training) About The Role Your experience in security operations is more valuable than ever — and not just in a SOC. We're looking for incident response professionals to help train and evaluate AI systems being built for the next generation...SuggestedOngoing contractContract workFreelanceRemote workFlexible hours
Alignerr Corp.
Ottawa, ON16 hours ago - ...the world. Your Role And Responsibilities Confluent Cloud processes... ...across AWS, GCP, and Azure. When incidents happen in a multi-cloud... ...thinking. We need an expert-level engineer who can drive proactive... ..., and evolving our incident response practices. You’ll be part...Manual labor
IBM
Ottawa, ON16 hours ago - Lead complex incident response and digital forensics investigations remotely from any Canadian province except Quebec. Advise clients through high-impact cybersecurity incidents. Optiv seeks a senior Enterprise Incident Management Consultant with approximately 5-8 years of...Remote work
Optiv
Ottawa, ON16 hours ago - ...position also includes vulnerability assessment, security assurance, reporting, and mentoring. Key Responsibilities: Lead complex cybersecurity incident investigations and response activities Improve detections, playbooks, automation, and operational processes Assess...
Lumentum Operations LLC
Ottawa, ON6 hours ago - ...people. Join us and shape the future of care. The Opportunity We're looking for a Staff Security Engineer to define and drive Fullscript's defensive threat detection, incident response, and AI-assisted SecOps capability across our cloud infrastructure, identity, endpoints...Work at officeWork from homeFlexible hours
Fullscript
Ottawa, ON16 hours ago - CrowdStrike is hiring a Senior Incident Response Consultant (Remote, CAN). You will lead IR engagements, develop hunting methods, and coordinate investigations with counsel across Windows, Mac, and Linux environments. You’ll perform forensics, malware analysis, and produce...Remote work
VulnU
Ottawa, ON16 hours ago - Take charge as a Lead Cyber Incident Response Consultant at Tech Recruiter, focusing on advanced forensic analysis in a remote setting. Engage... ...readiness assessments and tabletop exercises • Mentor junior staff and provide leadership during incidents • Manage on-call rota...Remote workRotating shift
Forensic Focus
Ottawa, ON16 hours ago $180k - $207k per year
# Senior Cyber Incident Response Consultant (DFIR)*The Tech Recruiter***Ontario**Remote · Senior · Full-time · CA$180,000.00/yr - CA$207,000.00... ...comfortable leading investigations, mentoring junior staff, and engaging confidently with technical and executive stakeholders...Full timeRemote workRotating shiftForensic Focus
Ottawa, ON16 hours ago$100k - $165k per year
# Incident Response Senior Consultant (Remote, CAN)CrowdStrike · crowdstrike.comCategory: Incident Response / DFIRLocation: RemoteLevel... ...to perform analysis of associated network logs.Reverse Engineering: ability to understand the capabilities of static and dynamic...Work at officeLocal areaRemote workVulnU
Ottawa, ON16 hours ago$176.5k per year
...blog: This role will join an existing team of Senior, Staff, and Principal engineers building the Content Library and Core Infrastructure of... ...and production operations (observability, on-call, and incident response for the systems you own). Evolve the Python userland...Long term contractFor contractorsLocal areaHome officeFlexible hours- ...connect! Brief overview of the Motion product Runneth from our Co-Founder & CEO, Reza Khadjavi . About the Senior Software Engineer role As a Senior Software Engineer, you'll work across the stack: building features, designing and maintaining the APIs and services...Permanent employmentFull timeSummer workInternshipWork at officeRemote workWork from homeShift work
Motion
Ottawa, ON6 days ago - ...layer of application code which needs to cover everything from functionality to routine updates. We’re looking for a senior software engineer who loves working at the boundary between product code and infrastructure. This is not a traditional DevOps or SRE role. You’ll spend...Permanent employmentFull timeSummer workInternshipWork at officeRemote workWork from home
Motion
Ottawa, ON6 days ago $138.45k - $173.06k per year
...greenfield role; it’s a stewardship role. We’re looking for a Staff Software Engineer, Core Applications (P4) who takes genuine pride in the... ...Design and build APIs in NestJS/TypeScript that power rich, responsive experiences across web and mobile Leverage AI tools to move...Permanent employmentFull timeImmediate start- CyberClan in Canada is hiring a DFIR Manager to lead a high-performing Security Incident Response function across global operations. You will develop incident response strategies, mentor analysts, and ensure legal and technical integrity during forensic investigations. Working...Remote work
CyberClan
Ottawa, ON16 hours ago - ...The ideal candidate will have a strong background in cybersecurity with at least 3 years of experience. Responsibilities include managing security tools, conducting incident investigations, and maintaining compliance with industry standards. A detail-oriented individual with...
Farm Boy Inc.
Ottawa, ON16 hours ago $130.5k - $186.62k per year
..., visit: . Job Summary SiTime is seeking a Senior Staff Analog Design Engineer to provide technical leadership in developing advanced clock... ...execution in a collaborative, fast-paced environment. Responsibilities Define, design, and develop innovative circuits for...Remote work$185k - $195k per year
...looking for a talented and passionate Staff Embedded Software Engineer for the Device Engineering team to... ...and fast-paced environment. RESPONSIBILITIES Own product-level architecture and... ...translating sensor data into reliable, responsive user-facing features on the Alarm....Casual workInternshipWork at officeImmediate start$122k - $183k per year
...Category Engineering Hire Type Employee Job ID 18597 Base Salary Range $122000-$183000 Remote Eligible No Date Posted 09.14.2026 We Are: At Synopsys, we drive the innovations that shape the way we live and connect. Our technology is central to the Era of Pervasive...Remote work- ...vieillissante ; accroitre les services en français ; renforcer sa responsabilité sociale ; accroitre l’impact de l’enseignement et de la... ...employés. En favorisant une approche terrain, le titulaire est responsable de faire évoluer et d’enrichir les compétences et les habiletés...Daily paidInternshipWork at officeDay shift
- ...reconstruire ici — un reflet de la confiance, de la culture et de la conviction derrière ce que nous construisons. À propos du rôle de Responsable Senior de la Réussite Client La plupart des emplois en CS consistent à favoriser l'adoption d'un outil. Celui-ci est différent....Permanent employmentFull timeSummer workWork at officeRemote workWork from homeDay shift
Motion
Ottawa, ON6 days ago - ...Job Description Job Description Staff Officer, Simulation Location: Canadian Army Simulation Centre (CASC), Kingston, Ontario... ...Desired • Canadian Technical Staff Course Key Responsibilities Responsibilities Common to All Simulation Staff Officers •...Civilian ContractorFull timeContract work
Calian
Ottawa, ON26 days ago - ...the right place! We are looking for a Staff iOS Developer to join one of our squads... ...team, continuously improving our engineering practices, and delivering state-of-the-art... ...specific vacancy, Lightspeed will not be responsible for any fees related to unsolicited resumes...Remote jobLocal areaFlexible hours
- ...et plus intelligentes pour relier les villes, réduire l’empreinte carbone et remplacer la voiture. Pourriez-vous être le/la Responsable Finance projet à temps plein à Saint-Bruno que nous recherchons ? Votre futur rôle Relevez un nouveau défi et mettez à profit...Daily paidFull timeApprenticeshipFlexible hours
- ...TEHORA est présentement à la recherche d’ un Responsable de communauté de pratique des Product Owners. Sans être exhaustifs, voici les services et livrables que devra fournir la personne retenue : Structurer et animer la communauté de pratique ; Définir et diffuser...Hourly payFull timeContract workRemote workFlexible hours
$87.5k per year
...recherchons des personnes talentueuses pour nous aider à façonner l'avenir du marketing alimenté par l'IA ! À propos du rôle de Responsable de compte Motion vient de lancer Runneth , un agent marketing IA, et la demande a explosé alors que les entreprises repensent...Permanent employmentFull timeSummer workWork at officeWork from homeMotion
Ottawa, ON6 days ago- ...started out as a team of three engineers. Today, we have grown to... ...data-science and AI research engine to deliver forecasting that is... ...Role We are seeking a Senior Staff Applied Scientist with deep... ...ExxonMobil, Cisco and more. Social Responsibility at Kinaxis: Our Diversity,...Long term contractWork at officeRemote workWorldwideFlexible hours
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Staff Incident Response Engineer. Be the first to apply!
