Staff Product Security Engineer, PSIRT

📋 Description

• Lead through significant security events, demonstrating technical and organizational leadership
• Partner with incident commanders, business information security leadership, engineering, and
• Drive coordinated response across affected releases, balancing risk and remediation feasibility
• Leverage understanding of product development cycles and engineering/product partnerships to move
• Verify fix completeness and guard against incomplete mitigations before release
• Contribute to ServiceNow's CVE disclosure process including CVE assignment, scoring, advisory

🎯 Requirements

• Minimum 8 years of related experience with Bachelor's degree; or 6 years with Master's; or PhD with
• Minimum 4 years of auditing source code for security vulnerabilities
• Ability to read and comprehend Java and JavaScript code
• Strong understanding of common Java and JavaScript vulnerabilities
• Proficiency in scripting in both Python and JavaScript for data gathering, processing, and
• Development of proof-of-concept exploits for web application vulnerabilities