Senior Staff Product Security Engineer & PSIRT Lead

ServiceNow, Inc.; Kirkland (WA); On-site; USD 201,000 - 352,000; Full time

Benefits offered by this job

Health plans

401(k) with company match

ESPP (Employee Stock Purchase Plan)

Flexible time away plan

Family leave programs

Job summary

ServiceNow seeks a senior staff-level product security engineer within the Security Organization (SSO) to act as a senior technical authority for PSIRT. You will lead deep-dive investigations, coordinate resolution across engineering and release teams, and demonstrate decisive leadership during major security events.

You will shape how ServiceNow responds to product vulnerabilities at scale, driving fixes to completion under incident pressure and guiding coordinated disclosures with external

Qualifications

• 12+ years of related experience with a Bachelor's degree; or 8 years with a Master's; or a PhD with 5 years of experience.
• Minimum 5 years of auditing source code for security vulnerabilities.
• Ability to read and understand Java and JavaScript code.
• Experience leading fix implementation and release coordination across teams.
• Familiarity with SDLC integration, CI/CD pipelines, and SaaS threat models.
• Experience leading a CVE disclosure process.

Responsibilities

• Demonstrate leadership during security events and coordinate across teams.
• Partner with incident commanders and engineering, ensuring clear ownership and hand-offs.
• Drive coordinated responses across releases and manage remediation feasibility.
• Lead CVE disclosures, advisories, and coordinated researcher engagements.
• Author postmortems and drive continuous improvement after incidents.
• Contribute to security risk themes and secure development practices.

Skills

AI integration mindset

Code comprehension (Java & JavaScript)

Scripting in Python & JavaScript

CVE disclosure leadership

Incident response leadership

Strong written/verbal communication

Education

Bachelor's degree (related field)

Master's degree

PhD

Job description

ServiceNow seeks a senior staff-level product security engineer within the Security Organization (SSO) to act as a senior technical authority for PSIRT. You will lead deep-dive investigations, coordinate resolution across engineering and release teams, and demonstrate decisive leadership during major security events.

You will shape how ServiceNow responds to product vulnerabilities at scale, driving fixes to completion under incident pressure and guiding coordinated disclosures with external