Senior Manager, Systems Engineering Vulnerability

Please Note:

This position requires passing ServiceNows USFedPASS background screening (US Federal Personnel Authorization Screening Standards) which includes a credit check criminal/misdemeanor check and drug test. Employment is contingent upon successful completion. Due to federal requirements candidates must be U.S. citizens naturalized citizens or permanent residents holding a valid green card.

This role is ideally based in our San Diego CA or Orlando FL office with the expectation of working in a hybrid environment.

Role Overview

As Senior Manager of Systems Engineering Vulnerability Management you will lead a team of infrastructure engineers responsible for ensuring compliance and reducing risk across ServiceNows Commercial and Regulated Markets environments. This role blends technical leadership with people management requiring the ability to drive a transition from reactive operations to proactive engineering-first practices while developing a high-performing team. Success in this role demands strong cross-functional collaboration and the ability to champion a shift left security mindset across the organization.

What you get to do in this role:

• Team Leadership & Development
  • Lead coach and grow a team of highly effective engineers fostering a culture of continuous learning and high performance through inclusive hiring practices goal setting individual development plans and performance management.
• Operational Excellence & SLAs
  • Own the end-to-end vulnerability lifecycle ensuring the organization meets strict remediation SLAs and prioritizes risks based on actual business impact.
  • Oversee the resolution of vulnerabilities across hybrid-cloud environments (AWS/Azure/GCP) and traditional on-premise infrastructure.
• Shift Left Advocacy
  • Partner with DevOps and Engineering teams to integrate security earlier in the SDLC ensuring vulnerabilities are identified and remediated during the design and build phases.
• Automation & AI Integration
  • Identify opportunities to leverage AI and automation to streamline scanning reporting and triage enabling the team to focus on complex risk analysis.
• Process & Program Improvement
  • Identify and execute systems and process optimization opportunities that improve reliability performance at scale and operational efficiency.
• Stakeholder Partnership
  • Act as a liaison between Security Engineering and Business leaders translating technical debt into business risk to drive executive buy-in for remediation priorities.
• Operational Rigor
  • Own early intervention triage and escalation response to ensure targets are met driving cross-functional resolution with urgency and transparency.

Qualifications :

To be successful in this role you have:

• Experience in leveraging or critically thinking about how to integrate AI into work processes decision-making or problem-solving. This may include using AI-powered tools automating workflows analyzing AI-driven insights or exploring AIs potential impact on the function or industry. 
• 12 years of related experience with a Bachelors degree; or 8 years and a Masters degree; or a PhD with 5 years experience; or equivalent experience.
• 8 years of experience in vulnerability management information security or related cybersecurity roles with 3 years of people management experience.
• Deep understanding of vulnerability management tools and processes (e.g. Tenable Trivy Anchore) CI/CD pipelines and cloud security across AWS GCP and Azure.
• Solid understanding of infrastructure services including Puppet Ansible Imaging Artifactory GitLab and Kubernetes.
• Track record of effective cross-functional collaboration and level-appropriate communication to build consensus and drive complex initiatives.
• Strong communication skills empathy for customers and the ability to influence stakeholders to prioritize security.
• Strong coordination and troubleshooting skills for handling complex security incidents and escalations.

Preferred Qualifications

• Experience leading teams through a transition from operations-heavy models to engineering-first infrastructure-as-code approaches.
• General knowledge of Linux systems architecture and engineering at global scale.
• Proficiency in Python Go or PowerShell to build custom integrations and automate workflows.
• Experience with the ServiceNow platform.
• Bachelors degree in Computer Science Cybersecurity or a related field; CISSP CISM or similar certifications preferred.

GCS-23

For positions in this location we offer a base pay of $171900 - $300800 plus equity (when applicable) variable/incentive compensation and benefits. Sales positions generally offer a competitive On Target Earnings (OTE) incentive compensation structure. Please note that the base pay shown is a guideline and individual total compensation will vary based on factors such as qualifications skill level competencies and work location. We also offer health plans including flexible spending accounts a 401(k) Plan with company match ESPP matching donations a flexible time away plan and family leave programs. Compensation is based on the geographic location in which the role is located and is subject to change based on work location.

Additional Information :

Work Personas

We approach our distributed world of work with flexibility and trust. Work personas (flexible remote or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service.

Equal Opportunity Employer

ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race color creed religion sex sexual orientation national origin or nationality ancestry age disability gender identity or expression marital status veteran status or any other category protected by addition all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements. 

Accommodations

We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process or are unable to use this online application and need an alternative method to apply please contact for assistance. 

Export Control Regulations

For positions requiring access to controlled technology subject to export control regulations including the U.S. Export Administration Regulations (EAR) ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities. 

From Fortune. 2025 Fortune Media IP Limited. All rights reserved. Used under license. 

Remote Work :

No

Employment Type :

Full-time