ServiceNow
Senior Staff Product Security Engineer | Product Security Incident Response Team (PSIRT)
$201K–$352K
Kirkland, Washington, United States +2 · Remote · Senior Staff · Full-time · Posted Oct 28, 2026
- Location
- Kirkland, Washington, United States
San Diego, California, United States
Santa Clara, California, United States - Experience
- 12 years with a Bachelor's degree; or 8 years with a Master's degree; or a PhD with 5 years of experience; or equivalent experience. Also requires at least 5 years auditing source code for security vulnerabilities.
- Education
- Bachelor's degree; or Master's degree; or PhD; or equivalent experience.
About the job
Leads investigations and incident response for vulnerabilities in ServiceNow products, coordinating fixes, CVE disclosures, and improvements to security processes.
What you'll do
- Lead technical response, investigations, and cross-team coordination during significant product security incidents; drive fixes through release and verify mitigations.
- Own CVE assignment, scoring, advisory reviews, and coordinated disclosure with external partners, vendors, and researchers.
- Write postmortems and translate lessons learned into process, technical, and secure development improvements.
What they ask for
- At least 5 years auditing source code for security vulnerabilities.
- Demonstrated leadership during significant security events or major incidents, and willingness to participate in on-call.
- Ability to read Java and JavaScript; strong understanding of vulnerabilities in both; proficiency scripting in Python and JavaScript.
- Experience leading fix implementation and release coordination, deep-dive investigations and root-cause analysis, exploit analysis, and a CVE disclosure process.
Nice to have
- Experience in a PSIRT or similar function for a major software or SaaS platform.
- Vulnerability assessments on the ServiceNow platform; emerging threats, cloud infrastructure, containerized environments, or relevant security certifications.
Pay
$201,300 - $352,300 USD base pay
Tools
Java, JavaScript, Python, CVSS, CI/CD, AWS, Azure, GCP
AI focus
Requires experience leveraging or critically considering AI integration in work processes, decision-making, or problem-solving. Preferred experience includes AI-specific attack vectors.
Model-written summary · the original posting is authoritative