Описание

This role is for a Staff Product Security Engineer driving vulnerability response and product security incident handling in ServiceNow PSIRT.

Lead through significant security events
Demonstrate technical and organizational leadership during these events, bringing structure and clear decision-making under pressure
Partner with incident commanders, business information security leadership, engineering, and customer-facing teams to maintain clear ownership, workstream prioritization, and hand-offs during these events
Drive coordinated response across affected releases, balancing risk and remediation feasibility
Leverage an understanding of product development cycles and engineering/product partnerships to move fixes through the release pipeline without stalling on organizational boundaries
Verify fix completeness and guard against incomplete mitigations before release
Contribute to ServiceNow's CVE disclosure process for incidents you own, including CVE assignment, scoring, advisory content, and publication timing

Experience in leveraging or critically thinking about how to integrate AI into work processes, decision-making, or problem-solving, which may include using AI-powered tools, automating workflows, analyzing AI-driven insights, or exploring AI's potential impact on the function or industry
Minimum 8 years of related experience with a Bachelor's degree; or 6 years with a Master's degree; or a PhD with 3 years of experience; or equivalent experience
Minimum 4 years of auditing source code for security vulnerabilities
Demonstrated leadership during significant security events or major incidents, with willingness to participate in on-call
Ability to read and comprehend Java and JavaScript code
Strong understanding of common Java and JavaScript vulnerabilities
Proficiency in scripting in both Python and JavaScript for data gathering, processing, and visualization

Staff Product Security Engineer, PSIRT