Staff Product Security Engineer, PSIRT

Staff product security engineer driving vulnerability response and product security incident handling in ServiceNow PSIRT, Hyderabad.

• 1         Lead Through Significant Security Events
• 2Demonstrate technical and organizational leadership during these events—bringing structure and clear decision-making under pressure. 
• 3Partner with incident commanders, business information security leadership, engineering, and customer-facing teams to maintain clear ownership, workstream prioritization, and hand-offs during these events. 
• 4Drive coordinated response across affected releases, balancing risk and remediation feasibility. 
• 5Leverage an understanding of product development cycles and engineering/product partnerships to move fixes through the release pipeline without stalling on organizational boundaries. 
• 6Verify fix completeness and guard against incomplete mitigations before release. 
• 7         CVE & Coordinated Disclosure Process 
• 8Contributed to ServiceNow's CVE disclosure process for incidents you own—CVE assignment, scoring, advisory content, and publication timing. 

• Experience in leveraging or critically thinking about how to integrate AI into work processes, decision-making, or problem-solving. This may include using AI-powered tools, automating workflows, analyzing AI-driven insights, or exploring AI's potential impact on the function or industry
• Minimum 8 years of related experience with a Bachelor's degree; or 6 years with a Master's degree; or a PhD with 3 years of experience; or equivalent experience. 
• Minimum 4 years of auditing source code for security vulnerabilities. 
• Demonstrated leadership during significant security events or major incidents, with willingness to participate in on-call. 
• Ability to read and comprehend Java and JavaScript code.  
• Strong understanding of common Java and JavaScript vulnerabilities.  
• Proficiency in scripting in both Python and JavaScript for data gathering, processing, and visualization.