Product Security Engineer, ServiceNow
$123.5-191.5k
Offers ESPP
2 days a week in office (Santa Clara, CA)
Cloud-based digital workflows for enterprises
Be an early applicant
Cloud-based digital workflows for enterprises
1001+ employees
Be an early applicant
$123.5-191.5k
Offers ESPP
2 days a week in office (Santa Clara, CA)
1001+ employees
Company mission
To transform IT to revolutionise the enterprise.
Role
Who you are
- 2+ years of application or product security experience
- Bachelor’s or Master’s degree in Computer Science, Engineering, Information Security, or equivalent work experience
- Experience thinking critically about or integrating AI into workflows, tooling, or decision-making (e.g., AI-powered tools, automated insights, or GenAI platforms)
- Demonstrated hands-on experience with:
- Identifying and resolving OWASP Top 10 vulnerabilities
- Threat modeling in Agile environments
- Security Verification Standards
- Authentication and authorization schemes
- Experience with automation using scripting languages (e.g., Python, JavaScript)
- Experience with data structures, algorithms, object-oriented design, design patterns, with security consideration
- Strong grasp of web and mobile application security techniques, threat modeling, and secure coding practices
- Understanding of vulnerabilities and risk in GenAI/AgenticAI platforms
- Ability to evaluate and triage results from SAST and DAST tools, perform risk assessments, and guide remediation efforts
- Strong analytical skills and ability to communicate with both technical and non-technical stakeholders
- Proactive mindset toward learning and adopting emerging technologies, tools, and frameworks to drive innovation
What the job involves
- Perform and support security assessments across a wide range of modern product features
- Conduct code reviews in a mixed-language codebase
- Integrate security into the software development lifecycle (SDLC) at ServiceNow
- Partner with developers and architects to design, implement, and enhance secure application solutions
- Apply expertise in authentication, authorization, secure mobile development, cryptography, and secure-by-design practices
- Champion security awareness and educate teams on secure development behaviors
- Define and implement application security best practices, standards, and guidelines
- Contribute to strategic and high-impact BSIMM activities across the company
- Support compliance efforts including audits, regulatory reviews, and security assessments
- Build and improve internal tools to make secure development easier and prevent insecure code from shipping
- Maintain and evolve automation test frameworks to improve security testing reliability and efficiency
- Collaborate with developers to design and automate targeted security testing strategies
- Work closely with engineering teams to identify, troubleshoot, and resolve security issues in development and test environments
Our take
ServiceNow provides cloud-based solutions that define, structure, manage, and automate services for enterprise operations, transforming old, manual ways of working into modern digital workflows. The company was founded in 2004 with a vision to build a cloud-based platform that would enable regular people to route work effectively through the enterprise.
Much as Salesforce enables a company to manage its external clients by keeping a record of all contacts and interactions, ServiceNow promises an internal system to meet the needs of employees. It has succeeded in claiming half the market, setting itself apart from legacy IT service-management software players like BMC Software, Hewlett Packard Enterprise, Cherwell Software and CA Technologies.
The company's success comes from two product traits: simplicity and customisability. ServiceNow's IT tools don't require the IT department to set them up. Once running, they offer a single collection centre for requests, data points and checklists, all of which can in turn be analysed by algorithms to predict needs, flag concerns and measure efficiency.
The company has more than 7500 customers, including 80% of the Fortune 500 list of the United States' largest corporations. ServiceNow now looks to increase its revenue threefold in upcoming years and has entered into a 5-year partnership plan with Visa, beginning with the launch of a Visa-integrated dispute resolution solution for issuers. The company is prioritising organic growth over mergers and acquisitions, with a target revenue of $15 billion, something which its Visa partnership will no doubt aid in achieving.
Freddie
Company Specialist at Welcome to the Jungle
Insights
16% employee growth in 12 months
Company
Funding (last 2 of 6 rounds)
Mar 2012
$11m
GROWTH EQUITY VC
Feb 2012
$17.9m
GROWTH EQUITY VC
Total funding: $83.8m
Company benefits
- Commuter benefits
- Annual learning stipends
- Work from home opportunities
- Generous family leave
- Matched donations
- Flexible PTO
- 401(k) matching
- Paid volunteer time
Company HQ
Santa Clara, CA
Leadership
Fred Luddy
(Chairman Of The Board)Previously Software Developer at Amdahl Corporation for 4 years and CTO at Peregrine Systems for 13 years.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 110 more jobs at ServiceNow