Service Now Developer – Security Operations

About e Bay

At e Bay, we're more than a global ecommerce leader — we're changing the way the world shops and sells. Our platform empowers millions of buyers and sellers in more than 190 markets around the world. We're committed to pushing boundaries and leaving our mark as we reinvent the future of ecommerce for enthusiasts. Our customers are our compass, authenticity thrives, bold ideas are welcome, and everyone can bring their unique selves to work — every day. We're in this together, sustaining the future of our customers, our company, and our planet. Join a team of passionate thinkers, innovators, and dreamers — and help us connect people and build communities to create economic opportunity for all.

About the Team

e Bay's Threat Management and Response (TMR) organization is responsible for protecting our global platform and users from evolving cyber threats. We build scalable tools, automate incident response, and drive continuous improvement in our detection and response capabilities. As part of this mission, the TMR Security Engineering team is growing its Service Now Automation implementation to improve automation, data integration, and response efficiency across the enterprise.

About the Role

We are seeking a Service Now Developer – Security Operations to design, build, and maintain Service Now-based security workflows supporting our global Cyber Security Incident Response Team (CSIRT) and Vulnerability Management programs. This role focuses on using Service Now's Security Operations suite, including Security Incident Response (SIR), Vulnerability Response (VR), and Threat Intelligence (TI) modules. It aims to streamline processes, automate responses, and integrate with existing enterprise security platforms. The ideal candidate is an experienced Service Now developer with deep knowledge of security operations, automation, and enterprise integrations.

What You'll Do

• Design, develop, and implement Service Now Sec Ops modules (SIR, VR, TI, and Event Management)
• Build and maintain automated workflows, UI policies, business rules, and script includes
• Develop REST/SOAP integrations with tools such as Splunk, Crowd Strike, Qualys, Salesforce, and BMC Remedy
• Develop custom dashboards and Performance Analytics to track security metrics and incident response performance
• Implement enhancements in the Service Portal to improve usability for security teams
• Maintain the reliability, scalability, and security of the Service Now platform through regular patching, upgrades, and configuration management
• Partner with Security Engineering, CSIRT, and Vulnerability Management teams to align workflows with operational needs
• Troubleshoot issues, perform root cause analysis, and ensure high availability of production environments
• Contribute to continuous improvement initiatives for security automation and incident management

What You'll Bring

• 5+ years of software development experience using JavaScript, AngularJS, HTML, CSS, and AJAX
• 4+ years of experience as a Service Now Developer and Administrator
• Hands-on experience with Service Now Security Operations (Sec Ops) modules
• Good understanding of Service Now scripting, integrations, and architecture (Business Rules, Script Includes, Flow Designer, Transform Maps)
• Experience developing integrations using REST/SOAP APIs and working with MID Server and Integration Hub
• Knowledge of SQL and experience diagnosing data-related performance issues
• Familiarity with source control tools (GIT, Maven) and UNIX shell scripting
• Ability to design and execute unit, integration, and regression tests
• Strong problem-solving skills and ability to work cross-functionally within technical and non-technical teams

Preferred Qualifications

• Service Now Certified System Administrator (CSA)
• Service Now Certified Implementation Specialist – Sec Ops
• Service Now Certified Application Developer (CAD)
• Knowledge of cybersecurity frameworks (NIST 800-61, MI+TRE ATT&CK, ISO 27001)
• Experience integrating Service Now with SIEM, SOAR, or Threat Intelligence platforms
• Exposure to enterprise-scale incident management or SOC environments

Compensation

The base pay range for this position is expected in the range below: $118,800 - $205,600

Base pay offered may vary depending on multiple individualized factors, including location, skills, and experience. The total compensation package for this position may also include other elements, including a target bonus and restricted stock units (as applicable) in addition to a full range of medical, financial, and/or other benefits (including 401(k) eligibility and various paid time off benefits, such as PTO and parental leave). Details of participation in these benefit plans will be provided if an employee receives an offer of employment.

If hired, employees will be in an "at-will position" and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.

Equal Opportunity

e Bay is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, sexual orientation, gender identity, veteran status, and disability, or other legally protected status. If you have a need that requires accommodation, please contact us at talent@ebay.com. We will make every effort to respond to your request for accommodation as soon as possible.

View our accessibility statement to learn more about e Bay's commitment to ensuring digital accessibility for people with disabilities.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

The e Bay Jobs website uses cookies to enhance your experience. By continuing to browse the site, you agree to our use of cookies. Visit our Privacy Center for more information.