Principal AI Security Engineer

About the role

This is a senior architecture position focused on the research, design, and prototyping of security measures for AI systems. You will define the technical strategy for the entire AI development lifecycle and act as the primary authority on emerging threats for the organization.

Key facts

What you'll do

• Direct the security architecture for agentic AI, LLMs, and various product models.
• Conduct threat modeling for complex GenAI scenarios, including multi-agent orchestration and autonomous systems.
• Establish platform-wide standards for RAG, data pipelines, and model access control.
• Create and promote secure-by-design principles for agentic workflows across all engineering teams.
• Represent the company at industry conferences and to executive leadership regarding AI security posture.
• Provide technical mentorship and guidance to engineering staff.

Requirements

• Bachelor, Master, or PhD in Computer Science or a related technical field with a focus on AI, ML, or Security, or equivalent professional experience.
• 10+ years of software engineering experience with a history of architecting enterprise-scale systems.
• 7+ years of security engineering experience, including network security, protocol design, and threat modeling, with recent focus on AI.
• Demonstrated history of securing LLM, GenAI, or agentic systems with cross-team impact.
• Direct experience building programs for AI red-teaming, guardrail architecture, or prompt injection defense.
• Deep knowledge of securing data and model pipelines, including the design of governance and access-control models.
• Expert-level understanding of the OWASP LLM Top 10, including the ability to critique and extend such frameworks.
• Proficiency with agentic AI frameworks such as LangChain and LangGraph.
• Proven ability to set technical direction and influence standards beyond a single team.

Nice to have

• 5+ years of programming experience in Python or Java.
• Mastery of authentication protocols like OAuth 2.0, OIDC, PKCE, and API keys, as well as agentic protocols like MCP and A2A.
• Experience creating and open-sourcing security tools or automation for AI.
• History of published research, CVEs, or speaking engagements in the AI/ML security space.
• Prior experience defining AI security strategy at the company or platform level.

Skills & tools

• LangChain, LangGraph, Python, Java, OAuth 2.0, OIDC, PKCE, MCP, A2A, OWASP LLM Top 10.

Practical notes

• ServiceNow operates with flexible work personas based on role and location.
• Employment is subject to export control regulations where applicable.
• Candidates requiring application accommodations should contact globaltalentss@servicenow.com.
• The company is an equal opportunity employer.