Senior Staff Product Security Engineer, PSIRT Lead

ServiceNow; San Diego (CA); Sur place; USD 181 000 - 317 000; Plein temps

Avantages offerts par ce poste

Health plans

401(k) plan with company match

Employee stock purchase plan

Résumé du poste

ServiceNow seeks a senior staff-level product security engineer to lead the Product Security Incident Response Team (PSIRT). You will handle the most significant security issues in ServiceNow's platform, coordinating across engineering, product, and release teams while maintaining calm under pressure.

Strong leadership and a deep understanding of SDLC security are essential for this role. You will drive incident responses, oversee CVE disclosures, and contribute to postmortems and continuous

Qualifications

• Experience integrating AI into work processes or workflows.
• Minimum 12 years with a Bachelor's, or 8 years with a Master's, or PhD with 5 years.
• Minimum 5 years auditing source code for security vulnerabilities.
• Demonstrated leadership during major security events with on-call willingness.
• Ability to read/understand Java and JavaScript code.
• Strong knowledge of common Java/JavaScript vulnerabilities.
• Scripting in Python and JavaScript for data gathering/visualization.
• Experience leading CVE disclosure processes.

Responsabilités

• Lead deep-dive product security investigations during incidents.
• Coordinate fixes across engineering, product, and release teams.
• Drive CVE disclosures and coordination with partners and researchers.
• Author postmortems and drive lessons learned to closure.
• Shape responses to product security vulnerabilities at scale.

Connaissances

AI in work processes

Security incident response

Java

JavaScript

Python

On-call readiness

Vulnerability assessment

Communication to leadership

Formation

Bachelor's degree; 8y MS; 5y PhD or equivalent

Description du poste

ServiceNow seeks a senior staff-level product security engineer to lead the Product Security Incident Response Team (PSIRT). You will handle the most significant security issues in ServiceNow's platform, coordinating across engineering, product, and release teams while maintaining calm under pressure.

Strong leadership and a deep understanding of SDLC security are essential for this role. You will drive incident responses, oversee CVE disclosures, and contribute to postmortems and continuous