Startups

Sr Staff Product Security Engineer - Product Security Incident Response Team (PSIRT)

ServiceNow · Petah Tikva, IL · On-site

← All jobs
About ServiceNow

It all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. Backed by Greylock and Sequoia.

About the role

ServiceNow seeks a senior staff-level product security engineer to serve as a senior technical authority within the Product Security Incident Response Team (PSIRT). PSIRT is ServiceNow's awareness, response, and investigation capability for post-release vulnerabilities in ServiceNow-developed products and service offerings. Found on 1752vc Careers, the job board for startup and VC roles.

What they're looking for

  • Minimum 12 years of related experience with a Bachelor's degree, or 8 years with a Master's degree, or a PhD with 5 years of experience, or equivalent experience
  • Minimum of 5 years of auditing source code for security vulnerabilities
  • Demonstrated leadership during significant security events or major incidents, with willingness to participate in on-call
  • Ability to read and comprehend Java and JavaScript code
  • Strong understanding of common Java and JavaScript vulnerabilities
  • Proficiency in scripting in both Python and JavaScript for data gathering, processing, and visualisation
More about this role

ServiceNow seeks a senior staff-level product security engineer to serve as a senior technical authority within the Product Security Incident Response Team (PSIRT). PSIRT is ServiceNow's awareness, response, and investigation capability for post-release vulnerabilities in ServiceNow-developed products and service offerings.

This role is for a recognised expert who can operate independently and as part of a team on the most significant security issues facing the platform—vulnerabilities that require evaluating intangibles. You will lead deep-dive investigations, coordinate resolution across engineering, product, and release teams, and demonstrate calm, decisive leadership during significant security events.

This is a role for someone who already understands product development cycles and the engineering and product relationships that drive them—and will use that fluency to lead fixes to completion under incident pressure. You will help shape how ServiceNow responds to product security vulnerabilities at scale and the technical rigour of the entire response capability.

  • Sunday: 10:00 - 18:00 UTC.
  • Monday: 08:00 - 16:00 UTC.
  • Tuesday: 08:00 - 16:00 UTC.
  • Wednesday: 08:00 - 16:00...

Read the full posting on ServiceNow's site ↗

Build your edge while you search

Free tools for founders and investors, plus VC Unfiltered, our take on startups, venture and the people who build them.