Principal AI Security Engineer

ServiceNow; United States; Remote; USD 180,000 - 240,000; Full time

Job summary

ServiceNow seeks a hands-on architecture leader to secure our AI development lifecycle across product lines. You will set platform-wide direction, define security architecture, and guide models, data pipelines, and access controls.

You’ll act as a technical authority on AI threats, collaborate with the AI security research team, and mentor engineers on security best practices.

Qualifications

• Bachelor’s / Master’s degree or PhD in Computer Science or a related technical field, security or AI/ML specialization preferred.
• 10+ years of software engineering experience with enterprise-scale architecture ownership.
• Proven track record of setting technical direction beyond own team and influencing standards.

Responsibilities

• Own the security strategy and architecture for the Agentic AI ecosystem, LLMs, and models across product lines.
• Lead threat modeling for GenAI/agentic surfaces, cross-agent orchestration, and new attack classes.
• Define secure-by-design standards for agentic systems and drive adoption across engineering teams.
• Represent ServiceNow's AI security posture externally and internally to executives.
• Mentor and guide engineers on AI-specific security work.

Skills

Leadership

Communication

AI/ML Security

Threat Modeling

Secure-by-Design

Security Architecture

LangChain/ LangGraph

OAuth/OIDC

Prompt Injection Defense

Python/Java

Cross-team Collaboration

Education

Bachelor’s / Master’s degree or PhD in Computer Science or related field

Tools

LangChain

LangGraph

OAuth 2.0

OIDC

PKCE

Job description

Company Description

It all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could do that for everyone—freeing people from busywork so they could focus on meaningful work. Today, ServiceNow is the AI control tower for business reinvention. Our ServiceNow AI platform brings together any AI, any data, and any workflow— helping 85% of the Fortune 500 work smarter, faster, and better. We're building an AI-native culture where technology and talent are unstoppable together. And we're just getting started.

Join us to put AI to work for people.

Job Description

Role

Thisis a hands-on architecture role: deep research, secure systems design, and prototyping, applied across product lines with minimal direction and broad latitude to set the technical agenda. You will setplatform-wide direction for securing the AI development lifecycle, define the security architecture, agents, and models operating within it, and represent ServiceNow's AI security point of viewexternally.You’llbe a technical authority other engineers and other teams look to on emerging AI-specific threats, working in close partnership with the AI security research team-drawing on their findings and feeding real-world attack surfaces back into their agenda.

Whatyou'lldo

• Own the security strategy and architecture for our Agentic AI ecosystem, LLMs, and models across product lines
• Lead threat modeling for the most complex and novel GenAI/agentic surfaces:cross-agent autonomy, multi-agent tool orchestration, and emerging attack classes not yet standardised in the industry
• Set the architectural standard for securing model/RAG/data pipelines platform-wide, including access-control and data-boundary models that other teams are expected to build against
• Define what "secure-by-design" means for agentic systems at ServiceNow, and drive adoption across engineering orgs
• Represent ServiceNow's AI security posture externally (standards bodies, industry publications, conferences) and internally to executive stakeholders
• Mentor and technically guide engineers on AI-specific security work

Qualifications

To succeed in this role,you’llneed:

• Bachelor’s /Master'sdegree or PhD in Computer Science or a related technical field, specialisation in Security or AI/MLoran exceptional, well-evidencedtrack recordsubstituting for it
• 10+ years of software engineering experience, includinga track recordof owning the architecture of complex systems at enterprise scale
• A track recordof setting technical direction beyond your own team - architecture or standards other teams adopted, senior engineersyou'velevelled up, and comfortoperatingwhere the problemisn'tyet defined
• 7+ years in security engineering-network and systems security, security protocols, design reviews, and threat modeling-with a focus on AI-specific work in recent years
• Multiple demonstrated engagements threat modeling and/or securing LLM, GenAI, or agentic systems, with evidence of platform-level or cross-team impact
• Personal ownership of prompt injection / jailbreak defense, guardrail architecture, or AI red-teaming programs-ideally having built the program/methodology, not just executed within one
• Deep, applied experience securing model, RAG, or data pipelines, including having designed the access-control and data-governance model others build against
• Fluency with the OWASP LLM Top 10 (or equivalent) to the point of extending, critiquing, or contributing to such frameworks-not just applying them
• Deep hands-on experience with agentic AI frameworks (e.g.,LangChain,LangGraph)
• Clear communication, a collaborative default, and a bias toward learning fast in a field that changesconstantly
• Bonus
• Strong command of auth protocols (OAuth 2.0, OIDC, PKCE, API Keys) and agentic protocols (MCP, A2A), including having designed identity/consent models for them
• Built and open-sourced (or productized) security tooling/automation for AI systems now used beyond one team
• Track recordof CVEs, top-tier publications, or invited talks specifically in AI/ML or LLM security
• Prior experience setting AI security strategy at a platform or company level, not justa single product
• 5+ years of programming experience in Java or Python

Additional Information

Work Personas

We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here . To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service.

Equal Opportunity Employer

ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements.

Accommodations

We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact [e-mail] for assistance.

Export Control Regulations

For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities.

From Fortune. ©2026 Fortune Media IP Limited. All rights reserved. Used under license. .