Senior Staff PSIRT Engineer — Flexible Incident Lead

ServiceNow; United States; Hybrid; USD 201,000 - 352,000; Full time

Benefits offered by this job

Health plans

401(k) with company match

Employee stock purchase plan (ESPP)

Matching donations

Flexible time away plan and family-lea

Job summary

ServiceNow seeks a senior staff-level product security engineer to lead as a technical authority within the Product Security Incident Response Team (PSIRT). You will oversee post-release vulnerability investigations, coordinate resolutions across engineering and product teams, and demonstrate decisive leadership during major security events.

This role requires deep SDLC knowledge, strong communication with technical and executive audiences, and the ability to operate under incident pressure

Qualifications

• Experience auditing source code for security vulnerabilities.
• Minimum 12 years of related experience with a Bachelor's degree; or 8 years with a Master's; or a PhD with 5 years of experience.
• Demonstrated leadership during significant security events or major incidents, with willingness to participate in on-call.
• Development of proof-of-concept exploits for web application vulnerabilities.
• Written and verbal communication of complex security risk clearly to technical teams and leadership.
• Experience with leading fix implementation and release coordination across engineering, product, and test/release teams.
• Proficiency in deep-dive product security investigations and root-cause analysis spanning design, code, configuration, and operational layers.
• Exploit analysis and proof-of-concept development that distinguishes real exploitability from theoretical risk.
• Familiarity with SDLC integration, CI/CD pipelines, SaaS threat models, and secure development practices.
• Experience leading a CVE disclosure process, including CVE assignment, scoring (CVSS), and advisory publication.

Responsibilities

• Demonstrate technical and organizational leadership during security events—providing structure and decision-making under pressure.
• Partner with incident commanders, security leadership, engineering, and customer-facing teams to maintain ownership and hand-offs during events.
• Drive coordinated response across releases, balancing risk and remediation feasibility.
• Move fixes through the release pipeline and ensure complete mitigations before release.
• Lead CVE disclosure processes and coordinate disclosures with external partners.

Skills

AI in work processes

Security leadership

Incident response

Clear communication

Education

Bachelor's degree

Master's degree

PhD

Tools

AWS

Azure

GCP

CI/CD pipelines

Job description

ServiceNow seeks a senior staff-level product security engineer to lead as a technical authority within the Product Security Incident Response Team (PSIRT). You will oversee post-release vulnerability investigations, coordinate resolutions across engineering and product teams, and demonstrate decisive leadership during major security events.

This role requires deep SDLC knowledge, strong communication with technical and executive audiences, and the ability to operate under incident pressure