Senior Staff Product Security Engineer | Product Security Incident Response Team (PSIRT)
Core
Senior technical authority leading deep-dive investigations, coordinated response, and CVE disclosure for post-release vulnerabilities in ServiceNow's SaaS platform.
Role type
Senior Staff Product Security Engineer (PSIRT)
Builds
Secure SaaS platform for enterprise workflow automation
Domain
Cloud Security / Application Security / Vulnerability Management
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Java and JavaScript code review, Python scripting, exploit analysis and proof-of-concept development, root-cause analysis, CVE assignment and scoring, release pipeline coordination, SDLC integration, cloud infrastructure knowledge
Preferred skills
PSIRT function experience, AI-specific attack vector knowledge, software supply chain security, containerized environments, OSWE certification
Technologies
Java, JavaScript, Python, AWS, Azure, GCP
Responsibilities
Lead response coverage for significant product vulnerabilities outside normal hours, coordinate fixes across engineering and product teams, drive CVE disclosure process including advisory publication, author postmortems and drive process improvements, conduct technical accuracy reviews of external advisories
Seniority
Senior Staff, hands-on IC with strategic leadership
