Senior PSIRT Engineer & Incident-Response Leader (Flexible)

ServiceNow; Kirkland (WA); Hybride; USD 201 000 - 352 000; Plein temps

Résumé du poste

ServiceNow is seeking a Senior Staff Product Security Engineer to lead the Product Security Incident Response Team (PSIRT). You will act as a senior technical authority, drive deep-dive investigations, coordinate with engineering and release teams, and provide decisive leadership during major security events.

This role requires fluency across product development, security, and release processes, including cross‑organization communication.

Qualifications

• Experience with AI in work processes, decision-making, or problem-solving.
• Minimum 12 years of related experience with a Bachelor's degree; or 8 years with a Master's; or 5 years with a PhD; or equivalent.
• Minimum 5 years of auditing source code for security vulnerabilities.
• Proven leadership during significant security events, including on-call exposure.

Responsabilités

• Demonstrate technical and organizational leadership during security events, providing structure and clear decision-making under pressure.
• Partner with incident commanders, security leadership, engineering, and customer-facing teams to maintain ownership and hand-offs during events.
• Drive coordinated response across releases, balancing risk and remediation feasibility.
• Lead CVE disclosure processes, including CVE assignment, scoring, advisory content, and publication timing.
• Coordinate with external partners on disclosures, align timelines and messaging.
• Author postmortems and drive lessons learned to closure after incidents.

Description du poste

ServiceNow is seeking a Senior Staff Product Security Engineer to lead the Product Security Incident Response Team (PSIRT). You will act as a senior technical authority, drive deep-dive investigations, coordinate with engineering and release teams, and provide decisive leadership during major security events.

This role requires fluency across product development, security, and release processes, including cross‑organization communication.