Staff Product Security Engineer, PSIRT
Core
Senior technical authority leading deep-dive investigations, coordination of fixes, and response to post-release vulnerabilities in ServiceNow's platform products.
Role type
Staff Product Security Engineer (PSIRT)
Builds
Secure release pipelines and coordinated disclosure processes for enterprise SaaS platform
Domain
Enterprise SaaS / Application Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Vulnerability research and exploit analysis, Root cause analysis, Incident response leadership, Secure SDLC integration, CI/CD pipeline security, Java and JavaScript code review, Python scripting, Risk assessment and mitigation strategy
Preferred skills
PSIRT function experience, AI-specific attack vector knowledge, Software supply chain security, Cloud infrastructure (AWS/Azure/GCP), Containerized environments, OSWE certification
Technologies
Java, JavaScript, Python, AWS, Azure, GCP
Responsibilities
Lead deep-dive product security investigations and root-cause analysis, Coordinate fix implementation and release across engineering and product teams, Manage CVE disclosure and advisory content accuracy, Drive lessons learned and process improvements after security incidents, Develop proof-of-concept exploits to validate vulnerability risk
Seniority
Staff, hands-on IC with strategic leadership