Staff Product Security Engineer, PSIRT

📋 Description

• Lead through significant security events, bringing structure and clear decision-making under
• Partner with incident commanders, business information security leadership, engineering, and
• Drive coordinated response across affected releases, balancing risk and remediation feasibility
• Leverage understanding of product development cycles and engineering/product partnerships to move
• Verify fix completeness and guard against incomplete mitigations before release
• Contribute to ServiceNow's CVE disclosure process for owned incidents, including CVE assignment

🎯 Requirements

• Minimum 8 years of related experience with a Bachelor's degree; or 6 years with a Master's degree
• Minimum 4 years of auditing source code for security vulnerabilities
• Demonstrated leadership during significant security events or major incidents, with willingness to
• Ability to read and comprehend Java and JavaScript code
• Strong understanding of common Java and JavaScript vulnerabilities
• Proficiency in scripting in both Python and JavaScript for data gathering, processing, and

🎁 Benefits

• Work Persona: Flexible
• Equal opportunity employer
• Accommodation support
• AI-native culture
• Opportunity to shape product security response capabilities
• Work with recognized experts in the security field