Principal Security EngineerFull-timeEmployee Type: RegularRegion: EMEA - Europe, Middle East and AfricaWork Persona: FlexibleCompany DescriptionIt all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could do that for everyone—freeing people from busywork so they could focus on meaningful work. Today, ServiceNow is the AI control tower for business reinvention. Our ServiceNow AI platform brings together any AI, any data, and any workflow— helping 85% of the Fortune 500® work smarter, faster, and better. We're building an AI-native culture where technology and talent are unstoppable together. And we're just getting started.Join us to put AI to work for people.Job DescriptionRoleThis is a principal-level security architecture and strategy role with enterprise-wide scope. You will set security direction across ServiceNow’s products and platforms, define the controls and standards that teams build against, and serve as a technical authority on complex and emerging threats, including those introduced by AI and agentic systems. You’ll also drive the use of AI to strengthen security itself, applying it to detection, triage, and security analysis. You’ll partner with security research teams to turn their findings into requirements and roadmap priorities, and represent ServiceNow’s security posture externally and to executive leadership. We’re looking for a deep security or engineering expert; experience with AI security is a plus, not a prerequisite.What you'll doContribute to the security strategy and reference architecture across the company’s products and platformsLead threat modeling for complex and novel systems, including AI and agentic systems where established patterns don’t yet existDefine platform-wide security standards, including access-control and data-boundary models that other teams build againstEstablish what secure-by-design means for new technologies, including AI, and drive adoption across engineering organisationsSet methodology and priorities for red-teaming and security assessment programsApply AI to strengthen security work, such as detection, triage, vulnerability discovery, and design reviewMake or approve security risk decisions for high-impact initiatives that cross organisational boundariesRepresent ServiceNow’s security posture to standards bodies, industry forums, and executive leadershipDevelop senior security engineers and shape the team’s technical agendaQualificationsTo succeed in this role, you’ll need:To succeed in this role, you'll needBachelor's, Master's, or PhD in Computer Science or a related field, or an exceptional record of impactExperience that meets one of the qualifying backgrounds below, including design reviews, threat modeling, and risk assessment at enterprise scaleA sustained record of setting security direction across multiple teams or product lines, with standards, controls, or architecture that others adopted as their baselineRecognised depth in at least one core security discipline, such as application, cloud, identity, cryptography, or offensive security, with working breadth across the othersExpert fluency with threat modelling methodologies (e.g., STRIDE, attack trees) and security frameworks such as the OWASP Top 10, to the point of extending, critiquing, or contributing to themA demonstrated ability to ramp quickly on new technology domains and reason about security where no established patterns existA track record of developing principal- and staff-level security leaders, and of shaping decisions with senior executives and engineering leadersClear, precise communication with executive audiences, and a record of influencing outcomes without direct authorityQualifying background (either path)Security-led:13+ years in security, with at least 3 years in principal-level roles owning architecture, risk, or threat modeling across the organizationEngineering-led:13+ years of software engineering, including at least 3 years building or owning security-critical systems such as identity, authorization, data pipelines, distributed systems, or platform security, and a demonstrated move into security ownership at enterprise scaleBonusDepth in AI security, including threat modeling or securing LLM, GenAI, or agentic systemsExperience with prompt injection and jailbreak defense, guardrail architecture, or AI red-teamingHands-on familiarity with agentic frameworks and protocols such as LangChain, LangGraph, MCP, and A2AExperience designing identity and consent models for AI agentsBuilt security tooling for AI systems used beyond one teamCVEs, publications, or invited talks in security research, especially in AI or LLM securityPrior experience setting AI security strategy at a company or platform levelAdditional InformationWork PersonasWe approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location.Learn more here. To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service.Equal Opportunity EmployerServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements.AccommodationsWe strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact[email protected]for assistance.Export Control RegulationsFor positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities.From Fortune. ©2026 Fortune Media IP Limited. All rights reserved. Used under license. .By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy applyI'm interestedI'm interestedPrivacy Notice
About ServiceNow
