Sr Staff Product Security Engineer - Product Security Incident Response Team (PSIRT)
Core
Senior technical authority leading deep-dive investigations, coordinated disclosure processes, and incident response for post-release vulnerabilities in ServiceNow's SaaS platform.
Role type
Sr Staff Product Security Engineer (PSIRT)
Builds
Coordinated vulnerability disclosures, postmortems, and secure release pipelines for enterprise SaaS products.
Domain
SaaS / Cloud Security / Vulnerability Management
Required skills
Product security incident response, root-cause analysis, exploit analysis and PoC development, CVE disclosure management, SDLC/CI/CD security, Java/JavaScript vulnerability assessment, Python/JavaScript scripting, cross-functional release coordination, technical leadership under pressure
Preferred skills
PSIRT experience in major SaaS platforms, AI-specific attack vectors, software supply chain security, cloud infrastructure (AWS/Azure/GCP), containerized environments, OSWE certification (via careerplan.io/jobs/744000153442299-sr-staff-product-security-engineer-product-security-incident-response-team-psirt-at-servic)
Technologies
Java, JavaScript, Python, AWS, Azure, GCP, CI/CD pipelines, CVSS scoring
Responsibilities
Lead technical and organizational leadership during significant security events; drive coordinated response across engineering and product teams to reduce exposure windows; conduct technical accuracy reviews for external advisories and joint disclosures; author postmortems and drive lessons learned; contribute to SDLC improvements and secure development practices
Seniority
Sr Staff, hands-on IC with strategic influence
