Staff Software Engineer - Product Security

ServiceNow’s Product Security organisation is building a dedicated Security R&D function — a software engineering team that builds security capabilities with the same engineering rigour as ServiceNow’s product organisation. We are looking for a Staff Security Engineer to be a core contributor on this team. Security R&D operates in two complementary modes: open contribution to product engineering — writing code alongside product teams where security expertise adds value — and developing its own security capabilities , including internal tooling, externally facing product features, AI-powered security automation, and third-party integrations. This is a new team being stood up in Petah Tikva, Israel, co-located with ServiceNow’s AI Security Research team. You will help shape the team’s engineering practices and technical foundation from day one. This role reports to the Sr. Engineering Manager, Security R&D. What You Will Do Build Security Capabilities Design and develop security tooling, automation, and platform services that operate at ServiceNow’s enterprise scale. Contribute code directly into ServiceNow product engineering codebases, embedding security capabilities where they have the highest impact. Build AI-powered security automation by integrating in-house models and third-party services into production workflows. Leverage ServiceNow’s platform — Agent Framework runtime, ACL enforcement, data layer, and workflow engine — to create security capabilities that external vendors cannot match. Collaborate Across Teams Work closely with the AI Security Research team on tooling for AI agent security, translating research insights into production-grade engineering. Partner with product engineering teams during open contribution engagements, earning trust through code quality, reliability, and delivery. Participate in design reviews, code reviews, and architecture discussions, contributing to the team’s technical standards and engineering culture. Grow with the Team Help define engineering best practices as a founding member of the Security R&D team. Contribute to hiring and onboarding as the team scales, helping maintain the engineering bar. Stay current on emerging AI/ML technologies and security threats, bringing new ideas into the team’s roadmap. What Makes This Role Unique Builder-led culture: Security R&D is defined by engineering output, not advisory reviews. We build production security capabilities with the same discipline as product engineering. Dual operating model: The team both contributes directly to product engineering and develops its own security products and services. Platform advantage: ServiceNow owns the entire stack — runtime, ACLs, data layer, workflow engine. You will build security capabilities that no external vendor can replicate. Founding team: This is a new team being built from scratch. You will shape its engineering culture, technical standards, and identity from day one. AI intersection: The role sits alongside the AI Security Research team, placing you at the frontier of securing AI systems at enterprise scale. To be successful in this role, you have: 8+ years of professional software engineering experience building production systems at scale. Bachelor’s degree in Computer Science, Engineering, or a related technical field. Strong hands-on proficiency in Python and Java. You write production code daily and take pride in software craftsmanship. Solid foundation in distributed systems, cloud-native architectures, and building services that meet enterprise requirements for scalability, reliability, and performance. Experience working in collaborative engineering environments, contributing to shared codebases with high code quality standards. Interest in or exposure to security engineering concepts — application security, infrastructure security, identity systems, or trust & safety. A security mindset is valued; deep security expertise can be developed on the team. Exposure to AI/ML pipelines, LLM integration, or agentic frameworks. Preferred Experience with security tooling development, SSDLC automation, or building security features into a product. Familiarity with container/Kubernetes environments, cloud security, or infrastructure-as-code. Experience in a SaaS or platform company building multi-tenant enterprise software. Experience working in a globally distributed engineering team. Work Personas We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here . To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service. Equal Opportunity Employer ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements. Accommodations We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact globaltalentss@servicenow.com for assistance. Export Control Regulations For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities. From Fortune. ©2026 Fortune Media IP Limited. All rights reserved. Used under license. .