Opportunity at
ServiceNowStaff Product Security Engineer, PSIRT
ServiceNow is seeking a Staff Product Security Engineer to join its Product Security Incident Response Team (PSIRT) in Hyderabad. This position functions as a senior technical…
Career Tools
About This Role
ServiceNow is seeking a Staff Product Security Engineer to join its Product Security Incident Response Team (PSIRT) in Hyderabad. This position functions as a senior technical authority responsible for investigating post-release vulnerabilities across ServiceNow-developed products and services. The role suits an experienced expert capable of operating independently and leading resolution efforts during critical security events. Key duties include managing significant security incidents, coordinating fix delivery through product and release pipelines,…
Job Description
ServiceNow is seeking a Staff Product Security Engineer to join its Product Security Incident Response Team (PSIRT) in Hyderabad. This position functions as a senior technical authority responsible for investigating post-release vulnerabilities across ServiceNow-developed products and services. The role suits an experienced expert capable of operating independently and leading resolution efforts during critical security events. Key duties include managing significant security incidents, coordinating fix delivery through product and release pipelines, verifying mitigation completeness, handling the CVE and disclosure process, and driving post-incident improvements. Specific coverage schedules apply to this position, spanning various days of the week in both UTC and IST time zones, with potential adjustments or additional hours required based on business needs and major security incidents.
Responsibilities
- Lead technical and organizational response efforts during critical security events
- Partner with incident commanders, engineering teams, and business leadership to coordinate workstreams
- Drive remediation across affected releases and verify fix completeness before deployment
- Manage CVE assignments, scoring, advisory content, and publication timing for owned incidents
- Perform technical accuracy reviews of external advisories and researcher write-ups
- Author root cause analyses and conduct post-incident retrospectives to improve secure development practices
Requirements
- At least 8 years of related experience with a Bachelor's degree, 6 years with a Master's degree, 3 years with a PhD, or equivalent experience
- Minimum 4 years of experience auditing source code for security vulnerabilities
- Demonstrated leadership history during major security incidents and willingness to take on-call duties
- Ability to read, comprehend, and identify common vulnerabilities in Java and JavaScript code
- Proficiency in Python and JavaScript scripting for data processing, gathering, and visualization
- Experience developing proof-of-concept exploits for web application vulnerabilities
- Track record of leading fix implementations and release coordination across multiple teams
- Capability to conduct deep-dive investigations spanning code, design, configuration, and operational layers
Qualifications
- Prior experience working in a PSIRT or similar function within a major software or SaaS organization
- Recognized expertise in vulnerability research, application security, or incident response
- Experience performing vulnerability assessments specifically on the ServiceNow platform
- Familiarity with emerging threats including AI attack vectors, supply chain security, and SDLC tooling security
- Background working with cloud infrastructure such as AWS, Azure, or GCP alongside containerized environments
- Relevant security certifications such as OSWE or demonstrated equivalent expertise
Core Skills
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Where is this job located?
This position is located in Hyderabad.
What is the employment type?
The role is full-time.
Is the salary specified in the job posting?
No, the posting does not provide salary details.
What are the working hours or coverage requirements?
The role requires coverage on specific days and times, such as Sunday, Monday, and Tuesday from 02:00 to 10:00 UTC (07:30 to 15:30 IST), Friday from 06:00 to 13:00 UTC (11:30 to 18:30 IST), and Saturday from 03:00 to 12:00 UTC (08:30 to 17:30 IST), with potential changes and additional hours required for significant incidents.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.