Note: The job is a remote job and is open to candidates in USA. ServiceNow is an AI platform company whose Security Organization delivers security solutions that reduce risk and protect the company and its customers. The Principal Security Engineer will lead hands-on security engineering and architecture for internal AI adoption, including threat modeling, governance, secure-by-design standards, and broader AI-driven cyber defense initiatives. The role also provides technical direction, partners on frontier AI threat research, and mentors engineers.
Responsibilities
- Architect Internal AI Security Strategy: Own the security architecture for internal AI adoption across ServiceNow, including agentic tools, LLMs, copilots, and the automation built on them
- Drive Execution Excellence: Push your architecture and standards through to adopted, production-grade outcomes, not just documentation, holding IAM, endpoint security, cloud security, IT, and infrastructure teams accountable for secure implementation
- Lead AI Threat Modeling: Threat model the most complex internal AI surfaces, from compromised or misdirected agents to attack classes not yet standardized in the industry
- Define AI Governance and Policy: Partner with Legal, Privacy, IT, and Engineering leadership to define what's safe to use, and translate that into enforceable, scalable controls for sanctioned and shadow AI alike
- Partner on Frontier AI Threat Research: Collaborate with ServiceNow's product AI security team to bring emerging attack research into ServiceNow internal AI security, and surface real-world internal findings back to them
- Drive Broader Cyber Defense Initiatives: Apply AI to modernize blue and red team practices, consolidate detection platforms, or take on the next problem that doesn't have a name yet
- Mentor and Raise the Bar: Mentor engineers across CDE and raise the technical bar on whatever problem you're driving
Skills
- * Experience in leveraging or critically thinking about how to integrate AI into work processes, decision-making, or problem-solving. This may include using AI-powered tools, automating workflows, analyzing AI-driven insights, or exploring AI's potential impact on the function or industry
- * 15+ years in security engineering, spanning security operations, architecture, threat modeling, and design reviews, with a recent focus on AI-specific threats. Or similar experience with education
- * 5+ years of software engineering experience, with a proven track record of owning complex system architecture at enterprise scale
- * Demonstrated ability to set technical direction and architect security solutions across multiple security domains (for example, AI security, IAM, endpoint security, infra security, detection engineering, and incident response)
- * Clear communication and a bias toward learning fast in a field that changes constantly
- * Bachelor's / Master's degree or PhD in Computer Science or a related technical field, with a specialization in Security or AI/ML, or an exceptional, well-evidenced track record substituting for it
- * Hands-on experience threat modeling and securing modern AI systems (LLMs, agents, RAG pipelines), with evidence of platform-level impact
- * Deep hands-on experience with agentic AI frameworks (e.g., LangChain, LangGraph)
- * Built or open-sourced security tooling/automation for AI systems adopted beyond one team
- * Prior experience setting AI security strategy at a platform or company level
Benefits
- Equity (when applicable)
- Variable/incentive compensation
- Health plans, including flexible spending accounts
- A 401(k) Plan with company match
- ESPP
- Matching donations
- A flexible time away plan
- Family leave programs
- Flexible or Remote work persona
Company Overview
Company H1B Sponsorship