Senior PSIRT Engineer & Incident Response Leader

ServiceNow; Santa Clara (CA); On-site; USD 201,000 - 352,000; Full time

Benefits offered by this job

Health plans

401(k) plan with company match

Employee stock purchase plan (ESPP)

Family leave programs

Job summary

ServiceNow seeks a senior staff-level Product Security Engineer to act as a technical authority within PSIRT, leading deep-dive investigations and coordinating across engineering, product, and release teams. You will shape response to vulnerabilities at scale and drive fixes under incident pressure.

You will leverage your experience in product development cycles, SDLC integration, and cloud security to guide incident response, root-cause analysis, and secure development practices across the

Qualifications

• Minimum 12 years of related experience with a Bachelor's degree; or 8 years with a Master's degree; or a PhD with 5 years of experience; or equivalent experience.
• Minimum 5 years of auditing source code for security vulnerabilities.
• Demonstrated leadership during significant security events or major incidents, with willingness to participate in on-call.
• Ability to read and comprehend Java and JavaScript code.
• Strong understanding of common Java and JavaScript vulnerabilities.
• Proficiency in scripting in both Python and JavaScript for data gathering, processing, and visualization.
• Experience leading fix implementation and release coordination across engineering, product, and test/release teams.
• Experience with leading a CVE disclosure process, including CVE assignment, scoring (CVSS), and advisory publication.

Responsibilities

• Demonstrate technical and organizational leadership during security events.
• Coordinate resolution across engineering, product, and release teams.
• Lead CVE disclosures and synchronize communications with external partners.
• Drive postmortems and lessons-learned after significant security incidents.
• Collaborate with incident commanders and cross-functional teams to manage on-call events.
• Ensure fixes move through release pipelines efficiently and securely.

Skills

AI integration

security investigations

leadership

incident response

Java

JavaScript

Python

CVE disclosure process

CI/CD pipelines

SaaS security

Education

Bachelor's degree + years experience

Master's degree

PhD + experience

Tools

Java

JavaScript

Python

CI/CD tooling

Security testing tools

Job description

ServiceNow seeks a senior staff-level Product Security Engineer to act as a technical authority within PSIRT, leading deep-dive investigations and coordinating across engineering, product, and release teams. You will shape response to vulnerabilities at scale and drive fixes under incident pressure.

You will leverage your experience in product development cycles, SDLC integration, and cloud security to guide incident response, root-cause analysis, and secure development practices across the