Senior Staff Product Security Engineer | Product Security Incident Response Team (PSIRT)

📋 Description

• Demonstrate technical and organizational leadership during security events—bringing structure and
• Partner with incident commanders, business information security leadership, engineering, and
• Drive coordinated response across affected releases, balancing risk and remediation feasibility.
• Leverage understanding of product development cycles and engineering/product partnerships to move
• Verify fix completeness and guard against incomplete mitigations before release.
• Lead ServiceNow's CVE disclosure process—owning CVE assignment, scoring, advisory content, and

🎯 Requirements

• Experience in leveraging or critically thinking about how to integrate AI into work processes
• Minimum 12 years of related experience with a Bachelor's degree; or 8 years with a Master's degree
• Minimum 5 years of auditing source code for security vulnerabilities.
• Demonstrated leadership during significant security events or major incidents, with willingness to
• Ability to read and comprehend Java and JavaScript code.
• Strong understanding of common Java and JavaScript vulnerabilities.

🎁 Benefits

• Base pay range: $201,300 - $352,300
• Equity (when applicable)
• Variable/incentive compensation
• Health plans including flexible spending accounts
• 401(k) Plan with company match
• ESPP