Senior Staff Product Security Engineer | Product Security Incident Response Team (PSIRT)

Join ServiceNow as a Senior Staff Product Security Engineer on the Product Security Incident Response Team (PSIRT), leading critical security initiatives from our Kirkland, Washington office—with full remote flexibility. This is a full-time position where you'll serve as a trusted security leader, protecting our customers and platform through rapid incident response, vulnerability management, and strategic security architecture.

Position Summary

ServiceNow is seeking an experienced Senior Staff Product Security Engineer to drive our PSIRT mission: responding to product security threats, coordinating vulnerability disclosures, and ensuring our platform remains secure for enterprise customers worldwide. In this role, you'll combine deep technical expertise with cross-functional leadership, owning the security incident lifecycle from detection and response through customer communication and remediation. You'll mentor security teams, define incident response protocols, and shape the future of our product security posture at scale.

Your Responsibilities

• Lead and coordinate product security incident response activities, from initial triage through resolution and customer notification
• Investigate security vulnerabilities in ServiceNow products, assess impact and exploitability, and develop comprehensive remediation strategies
• Own vulnerability disclosure communication with customers, partners, and security researchers; maintain trust and transparency throughout the disclosure process
• Develop and maintain incident response playbooks, escalation procedures, and security protocols that scale across the organization
• Collaborate with engineering, product, and legal teams to resolve security issues rapidly and effectively
• Analyze emerging security threats and trends; recommend proactive defensive measures and architectural improvements
• Build and mentor security engineers on the PSIRT, fostering a culture of excellence in incident response

What You Bring

• 10+ years of software security experience, with substantial hands-on expertise in incident response, vulnerability management, or product security
• Proven ability to investigate complex security vulnerabilities across web applications, cloud infrastructure, or enterprise software
• Strong technical foundation: secure coding practices, threat modeling, common attack vectors, and security architecture principles
• Experience leading cross-functional security initiatives and communicating security issues to non-technical stakeholders
• Excellent written and verbal communication skills; comfort explaining technical security concepts clearly to varied audiences
• Demonstrated ability to thrive in high-pressure environments and make sound decisions with incomplete information
• Bachelor's degree in Computer Science, Information Security, or related field (or equivalent professional experience)

Working at ServiceNow

ServiceNow empowers digital transformation for the world's largest enterprises. Our platform automates critical workflows across IT, HR, Customer Service, and beyond. As a member of our security team, you'll work alongside world-class engineers and security professionals, contributing to a company that prioritizes both innovation and customer trust. Remote work gives you flexibility while staying connected to a collaborative, security-focused culture.

Ready to Apply?

To apply, complete your application directly on this page, or you'll be redirected to the employer's application platform to finish submitting there.