Senior Staff Product Security Engineer | Product Security Incident Response Team (PSIRT)

📋 Description

• Demonstrate technical and organizational leadership during security events—bringing structure and
• Partner with incident commanders, business information security leadership, engineering, and
• Reduce Exposure Window: Drive coordinated response across affected releases, balancing risk and
• Leverage an understanding of product development cycles and engineering/product partnerships to
• Verify fix completeness and guard against incomplete mitigations before release.
• Drive the CVE & Coordinated Disclosure Process: Lead ServiceNow's CVE disclosure process—owning

🎯 Requirements

• Experience in leveraging or critically thinking about how to integrate AI into work processes
• Minimum 12 years of related experience with a Bachelor's degree; or 8 years with a Master's degree
• Minimum 5 years of auditing source code for security vulnerabilities.
• Demonstrated leadership during significant security events or major incidents, with willingness to
• Ability to read and comprehend Java and JavaScript code.
• Strong understanding of common Java and JavaScript vulnerabilities.

🎁 Benefits

• Health plans, including flexible spending accounts
• 401(k) Plan with company match
• ESPP
• Matching donations
• Flexible time away plan
• Family leave programs