Sr Staff Product Security Engineer - PSIRT

About the role

ServiceNow is looking for a senior staff-level product security engineer to act as a senior technical authority within its Product Security Incident Response Team (PSIRT). PSIRT handles awareness, response and investigation of post-release vulnerabilities in ServiceNow products. The role suits a recognised expert who can work independently and in a team on the most significant security issues, leading deep-dive investigations and coordinating resolution across engineering, product and release teams.

Key responsibilities

• Lead through significant security events, partnering with incident commanders, security leadership, engineering and customer-facing teams
• Reduce the exposure window by driving coordinated response across affected releases and verifying fix completeness
• Drive the CVE and coordinated disclosure process, including technical accuracy reviews of advisories and researcher write-ups
• Write postmortems, take part in retrospectives and feed lessons learned into secure development practices

Required profile

• Minimum 12 years of related experience with a Bachelor's degree, or 8 years with a Master's, or 5 years with a PhD, or equivalent
• At least 5 years auditing source code for security vulnerabilities
• Demonstrated leadership during major incidents and willingness to take on-call
• Experience leading fix implementation and release coordination across engineering, product and test/release teams
• Experience leading a CVE disclosure process, including CVE assignment, CVSS scoring and advisory publication

Required skills

• Java and JavaScript code reading and comprehension, and strong knowledge of common Java and JavaScript vulnerabilities
• Scripting in Python and JavaScript for data gathering, processing and visualisation
• Proof-of-concept exploit development for web application vulnerabilities and exploit analysis
• Deep-dive product security investigations and root-cause analysis
• Familiarity with SDLC, CI/CD pipelines, SaaS threat models and secure development practices
• Preferred: PSIRT experience, vulnerability assessment of ServiceNow, cloud infrastructure (AWS, Azure, GCP) and containerised environments