Principal Security Engineer | Cyber Defense Engineering

The ServiceNow Security Organization (SSO)  

The ServiceNow Security Organization (SSO) delivers world-class, innovative security solutions to reduce risk and protect the company and our customers. We enable our customers to migrate their most sensitive data and workloads to the cloud, accelerating our business so that we are the most trusted SaaS provider. We create an environment where our employees are proud to work and can make a positive impact  

This is a hands-on engineering and architecture role within Cyber Defense Engineering (CDE), applied to some of the hardest, least-defined problems in cyber defense, protecting a platform trusted by thousands of the world's largest enterprises. You'll operate with minimal direction and broad latitude to set the technical agenda. 

You'll start by tackling one of the highest-stakes problems in enterprise security today: how do you secure a company's own employees and systems as they adopt AI faster than anyone can govern it? Think compromised internal agents, AI copilots that leak sensitive data, and shadow AI tools appearing before any policy exists.  

You'll architect the threat models, controls, and secure-by-design standards other teams build against, partnering with ServiceNow's product AI security research team to apply frontier research internally, and you'll be the technical authority Security, IT, and Engineering rely on for internal AI threats. 

Beyond internal AI security, you'll also lead initiatives that use AI to transform cyber defense more broadly, such as modernizing blue and red team practices or solving problems that don't have a name yet. This role is for engineers who want to keep solving cyber defense's hardest, least-defined problems at the frontier of the field, not run a single program indefinitely. 

What You'll Do 

• Architect Internal AI Security Strategy: Own the security architecture for internal AI adoption across ServiceNow, including agentic tools, LLMs, copilots, and the automation built on them 
• Drive Execution Excellence: Push your architecture and standards through to adopted, production-grade outcomes, not just documentation, holding IAM, endpoint security, cloud security, IT, and infrastructure teams accountable for secure implementation 
• Lead AI Threat Modeling: Threat model the most complex internal AI surfaces, from compromised or misdirected agents to attack classes not yet standardized in the industry 
• Define AI Governance and Policy: Partner with Legal, Privacy, IT, and Engineering leadership to define what's safe to use, and translate that into enforceable, scalable controls for sanctioned and shadow AI alike 
• Partner on Frontier AI Threat Research: Collaborate with ServiceNow's product AI security team to bring emerging attack research into ServiceNow internal AI security, and surface real-world internal findings back to them 
• Drive Broader Cyber Defense Initiatives: Apply AI to modernize blue and red team practices, consolidate detection platforms, or take on the next problem that doesn't have a name yet 
• Mentor and Raise the Bar: Mentor engineers across CDE and raise the technical bar on whatever problem you're driving