Principal Security Engineer

Role 

This is a principal-level security architecture and strategy role with enterprise-wide scope. You will set security direction across ServiceNow’s products and platforms, define the controls and standards that teams build against, and serve as a technical authority on complex and emerging threats, including those introduced by AI and agentic systems. You’ll also drive the use of AI to strengthen security itself, applying it to detection, triage, and security analysis. You’ll partner with security research teams to turn their findings into requirements and roadmap priorities, and represent ServiceNow’s security posture externally and to executive leadership. We’re looking for a deep security or engineering expert; experience with AI security is a plus, not a prerequisite. 

What you'll do 

• Contribute to the security strategy and reference architecture across the company’s products and platforms 
• Lead threat modeling for complex and novel systems, including AI and agentic systems where established patterns don’t yet exist 
• Define platform-wide security standards, including access-control and data-boundary models that other teams build against 
• Establish what secure-by-design means for new technologies, including AI, and drive adoption across engineering organisations 
• Set methodology and priorities for red-teaming and security assessment programs 
• Apply AI to strengthen security work, such as detection, triage, vulnerability discovery, and design review 
• Make or approve security risk decisions for high-impact initiatives that cross organisational boundaries 
• Represent ServiceNow’s security posture to standards bodies, industry forums, and executive leadership 
• Develop senior security engineers and shape the team’s technical agenda

Function: Engineering
Experience Level: Not Applicable