Senior Product Security Engineer, App Sec

Summary

Join ServiceNow as a Product Security Engineer and play a key role in identifying and mitigating security risks. You will lead security discussions with engineering teams, research new attack vectors, and perform security testing on ServiceNow products. Responsibilities include auditing source code, identifying vulnerabilities, and recommending remediation strategies. This role requires 6+ years of application security testing experience, coding proficiency (Java, Python, or JavaScript), and in-depth knowledge of application security vulnerabilities and testing methodologies. Experience with manual source code review and a deep understanding of web application architecture are essential. Knowledge of ServiceNow scripting, AI security, and experience working in a Product Security team are advantageous.

Requirements

• Experience in leveraging or critically thinking about how to integrate AI into work processes, decision-making, or problem-solving. This may include using AI-powered tools, automating workflows, analyzing AI-driven insights, or exploring AI's potential impact on the function or industry
• A passion for Security
• 6+ years of experience in an application security testing role
• Coding experience and developer proficiency in at least one language: Java, Python or Javascript
• In-depth knowledge of application security vulnerabilities and testing methodologies
• Experience with manual source code review in languages such as: Java, JavaScript, Python
• Deep understanding of web application architecture and design principles

Responsibilities

• Identify the important strategic product security focus areas for the team
• Help lead security discussions with the other engineering teams
• Participate in research to identify new attack vectors and adopt new methodologies
• Perform product security testing on ServiceNow products
• Audit source code of the platform and applications
• Identify, communicate, and recommend remediation of Security Vulnerabilities

Preferred Qualifications

• Worked in a Product Security team is a plus
• Knowledge of ServiceNow Scripting is an advantage
• Knowledge on AI security is an advantage