Security Engineer - ServiceNow Developer

At eBay, we're more than a global ecommerce leader — we’re changing the way the world shops and sells. Our platform empowers millions of buyers and sellers in more than 190 markets around the world. We’re committed to pushing boundaries and leaving our mark as we reinvent the future of ecommerce for enthusiasts.

Our customers are our compass, authenticity thrives, bold ideas are welcome, and everyone can bring their unique selves to work — every day. We're in this together, sustaining the future of our customers, our company, and our planet.

Join a team of passionate thinkers, innovators, and dreamers — and help us connect people and build communities to create economic opportunity for all.

eBay’s Threat Management and Response (TMR) organization is responsible for protecting our global platform and users from evolving cyber threats. We build scalable tools, automate incident response, and drive continuous improvement in our detection and response capabilities.

As part of this mission, the TMR Security Engineering team is growing its ServiceNow Automation implementation to improve automation, data integration, and response efficiency across the enterprise.

We are seeking a ServiceNow Developer – Security Operations to design, build, and maintain ServiceNow-based security workflows supporting our global Cyber Security Incident Response Team (CSIRT) and Vulnerability Management programs.

This role focuses on using ServiceNow’s Security Operations suite, including Security Incident Response (SIR), Vulnerability Response (VR), and Threat Intelligence (TI) modules. It aims to streamline processes, automate responses, and integrate with existing enterprise security platforms.

The ideal candidate is an experienced ServiceNow developer with deep knowledge of security operations, automation, and enterprise integrations.

• Design, develop, and implement ServiceNow SecOps modules (SIR, VR, TI, and Event Management).

• Build and maintain automated workflows, UI policies, business rules, and script includes.

• Develop REST/SOAP integrations with tools such as Splunk, CrowdStrike, Qualys, Salesforce, and BMC Remedy.

• Develop custom dashboards and Performance Analytics to track security metrics and incident response performance.

• Implement enhancements in the Service Portal to improve usability for security teams.

• Maintain the reliability, scalability, and security of the ServiceNow platform through regular patching, upgrades, and configuration management.

• Partner with Security Engineering, CSIRT, and Vulnerability Management teams to align workflows with operational needs.

• Troubleshoot issues, perform root cause analysis, and ensure high availability of production environments.

• Contribute to continuous improvement initiatives for security automation and incident management

• 5+ years of software development experience using JavaScript, AngularJS, HTML, CSS, and AJAX.

• 4+ years of experience as a ServiceNow Developer and Administrator.

• Hands-on experience with ServiceNow Security Operations (SecOps) modules.

• Good understanding of ServiceNow scripting, integrations, and architecture (Business Rules, Script Includes, Flow Designer, Transform Maps).

• Experience developing integrations using REST/SOAP APIs and working with MID Server and IntegrationHub.

• Knowledge of SQL and experience diagnosing data-related performance issues.

• Familiarity with source control tools (GIT, Maven) and UNIX shell scripting.

• Ability to design and execute unit, integration, and regression tests.

• Strong problem-solving skills and ability to work cross-functionally within technical and non-technical teams.

• ServiceNow Certified System Administrator (CSA)

• ServiceNow Certified Implementation Specialist – SecOps

• ServiceNow Certified Application Developer (CAD)

• Knowledge of cybersecurity frameworks (NIST 800-61, MI+TRE ATT&CK, ISO 27001).

• Experience integrating ServiceNow with SIEM, SOAR, or Threat Intelligence platforms.

• Exposure to enterprise-scale incident management or SOC environments.
   

The base pay range for this position is expected in the range below:

Base pay offered may vary depending on multiple individualized factors, including location, skills, and experience. The total compensation package for this position may also include other elements, including a target bonus and restricted stock units (as applicable) in addition to a full range of medical, financial, and/or other benefits (including 401(k) eligibility and various paid time off benefits, such as PTO and parental leave). Details of participation in these benefit plans will be provided if an employee receives an offer of employment.

If hired, employees will be in an “at-will position” and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.

Please see the Talent Privacy Notice for information regarding how eBay handles your personal data collected when you use the eBay Careers website or apply for a job with eBay.

eBay is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, sexual orientation, gender identity, veteran status, and disability, or other legally protected status. If you have a need that requires accommodation, please contact us at [email protected]. We will make every effort to respond to your request for accommodation as soon as possible. View our accessibility statement to learn more about eBay's commitment to ensuring digital accessibility for people with disabilities. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

The eBay Jobs website uses cookies to enhance your experience. By continuing to browse the site, you agree to our use of cookies. Visit our Privacy Center for more information.