Sr Staff Product Security Engineer - Product Security Incident Response Team (PSIRT)
Core
Senior technical authority leading deep-dive investigations, coordinated disclosure, and resolution of post-release vulnerabilities for ServiceNow's platform.
Role type
Sr Staff Product Security Engineer (PSIRT)
Builds
Coordinated vulnerability disclosures, secure release pipelines, and post-incident process improvements for ServiceNow products.
Domain
SaaS / Enterprise Software / Application Security
Required skills
Vulnerability research and exploit development, Root cause analysis, CVE disclosure management, Incident response leadership, Secure SDLC integration, CI/CD pipeline security, Java/JavaScript code review, Python scripting, Risk assessment
Preferred skills
PSIRT experience, AI-specific attack vectors, Supply chain security, Cloud infrastructure (AWS/Azure/GCP), Container security, OSWE certification
Technologies
Java, JavaScript, Python, AWS, Azure, GCP
Responsibilities
Lead technical investigations and coordinate resolution across engineering and product teams, Manage CVE assignment and coordinated disclosure processes, Author postmortems and drive continuous improvement of security practices, Verify fix completeness before release, Represent PSIRT in external researcher engagements
Seniority
Sr Staff, hands-on IC with strategic leadership
