Staff Product Security Engineer, PSIRT

About the role

ServiceNow seeks a staff-level product security engineer to serve as a senior technical authority within the Product Security Incident Response Team (PSIRT). PSIRT is ServiceNow's awareness, response, and investigation capability for post-release vulnerabilities in ServiceNow-developed products and service offerings.

What you'll do

• Drive coordinated response across affected releases, balancing risk and remediation feasibility
• Verify fix completeness and guard against incomplete mitigations before release
• Conduct technical accuracy reviews of external advisories, researcher write-ups, and joint disclosure content to ensure correctness before publication
• Participate in retrospectives following significant product security events, translating findings into concrete process and technical improvements
• Contribute to partner teams tracking product security risk themes and trends across the portfolio

What you need

• 8–14 yrs of experience
• Python
• Incident response
• JavaScript
• Java
• Root cause analysis
• CI/CD
• PhD

Good to have

• AWS
• GCP
• Azure
• ServiceNow