Senior Staff AI Security Engineer

About the role

This is a hands-on architecture position focused on research, secure system design, and prototyping across multiple product lines. You will define the security strategy for the AI development lifecycle and establish how models and agents are protected within the ServiceNow ecosystem.

Key facts

What you'll do

• Architect security for Agentic AI, LLMs, and various models across the product portfolio.
• Perform threat modeling for complex GenAI surfaces, including multi-agent orchestration and cross-agent autonomy.
• Build secure data and RAG pipelines with standardized access-control and data-boundary patterns.
• Implement secure-by-design principles for agentic systems and promote these practices across engineering teams.
• Represent the AI security posture to internal stakeholders and contribute to industry research or conferences.
• Provide technical mentorship and guidance to engineers working on AI security initiatives.

Requirements

• Bachelor, Master, or PhD in Computer Science or a technical field with a focus on AI, ML, or Security, or equivalent professional experience.
• 8+ years of software engineering experience building complex, enterprise-scale systems.
• 5+ years of security engineering experience, including systems and network security, design reviews, and threat modeling, with recent focus on AI.
• Demonstrated history of setting technical direction and influencing standards beyond your immediate team.
• Proven experience securing LLM, GenAI, or agentic systems with measurable cross-team impact.
• Hands-on background in guardrail architecture, AI red-teaming, or prompt injection and jailbreak defense.
• Applied knowledge of securing RAG, model, or data pipelines, including data governance and access control.
• Proficiency with the OWASP LLM Top 10 and the ability to identify where these frameworks require practical adaptation.
• Practical experience using agentic AI frameworks such as LangChain or LangGraph.

Nice to have

• 5+ years of programming experience in Python or Java.
• Expertise in identity and agentic protocols like OAuth 2.0, OIDC, PKCE, API Keys, MCP, or A2A.
• Experience developing security tooling or automation adopted by external teams.
• Track record of CVEs, technical publications, or conference presentations related to LLM or AI/ML security.
• Experience defining AI security strategy across multiple products.

Skills & tools

• Agentic AI frameworks (LangChain, LangGraph)
• Threat modeling
• GenAI and LLM security
• Secure pipeline design
• Java or Python

Practical notes

ServiceNow operates under a flexible work persona model based on the nature of the role and your proximity to an office. Employment is contingent upon meeting export control requirements where applicable. Candidates requiring accommodations during the application process should contact globaltalentss@servicenow.com.