Principal Software Engineer | DevSecOps | Product Security

**PLEASE NOTE, THIS ROLE REQUIRES A MINIMUM OF 2 DAYS A WEEK IN ANYONE OF OUR SERVICENOW OFFICES THROUGH THE U.S.....If you cannot commit to 2 days per week in a ServiceNow Office..........PLEASE DO NOT APPLY, THANK YOU VERY MUCH** 

The ServiceNow Security Organization (SSO)  

The ServiceNow Security Organization (SSO) delivers world-class, innovative security solutions to reduce risk and protect the company and our customers. We enable our customers to migrate their most sensitive data and workloads to the cloud, accelerating our business so that we are the most trusted SaaS provider. We create an environment where our employees are proud to work and can make a positive impact 

The DevSecOps team within Product Security is responsible for building, integrating, and operating resilient security services that protect the NOW platform, store applications, mobile applications, and internal services. We empower over 9,000 developers globally to build secure software by embedding automated security tools and services throughout the software development lifecycle. We are a collaborative and innovative team, driving a security-first culture through automation and continuous improvement. 

Role

As a Principal Engineer on the DevSecOps team, you will lead the development, deployment, integration, and scale of security services to support SAST, Secret Detection, Deep Code Search, and other Source Code Security functions across ServiceNow. You will support Product Engineers and Product Management across hundreds of BUs and understand how security is an enabler to reduce product delivery cycle time and security risk.   

In addition, you will ensure our embedded security services provide the best developer experience with high fidelity findings and actionable remediation guidelines.  Finally, you will lead the build of ServiceNow Apps and Services to support the Product Security Organization’s security activities at scale and make the world of work, work better for all of us.  

What you get to do in this role: 

• Use your software engineering expertise to engage in deep technical conversations with lead engineers across the company, balancing security risk prioritization with empathy for speed-to-market pressures. 
• Clearly articulate and prioritize security risk to engineering peers and business unit leaders (VP/SVP level), exercising diplomacy in high-visibility situations and building metrics dashboards that resonate with both technical and executive audiences. 
• Innovate with AI/ML technologies to proactively identify, prioritize, and remediate security risks at scale, applying intelligent automation to improve signal quality, reduce false positives, and accelerate secure software delivery. 
• Lead the architecture and development of our next-gen source code security tools, including a suite of SAST, Secret detection, Code Search and other services to secure our platform, store applications, and cloud native services.  You can see the forest through the trees and prioritize service development areas by risk and organizational readiness.  
• Design and advocate for security service integrations at optimal points in the software development lifecycle, enabling developers to discover and remediate issues with zero friction. 
• Coach and mentor team members in their personal and professional development, identify training opportunities, and seek diverse perspectives to continuously improve team capabilities. 
• Create targeted security training and translate technical findings into actionable, practical guidance that makes secure-by-default choices easier than insecure ones for the entire engineering organization.