Principal Software Engineer
Job description
About the role
In this pivotal position, you will engage in the architecture, research, and design of secure systems that span the entire ServiceNow product suite. Your role will involve setting the technical direction for the AI development lifecycle while serving as a key expert on emerging threats related to AI. Collaboration with internal security research teams will be essential as you work to enhance the security posture of the organization.
Key facts
What you'll do
- Oversee the security architecture and strategic planning for large language models (LLMs), AI models, and agentic AI ecosystems.
- Perform comprehensive threat modeling for sophisticated generative AI surfaces, including interactions between multiple agents and autonomous systems.
- Develop and enforce platform-wide standards aimed at securing retrieval-augmented generation (RAG), data pipelines, and access control models for AI systems.
- Advocate for secure-by-design principles for agentic systems throughout all engineering teams.
- Act as the representative for the company's security stance to both executive leadership and external industry organizations.
- Offer technical mentorship and direction to engineering personnel concerning AI security best practices.
- Collaborate with cross-functional teams to ensure alignment on security protocols and standards.
- Stay abreast of the latest developments in AI security and integrate relevant findings into the company's security framework.
Requirements
- A Bachelor's, Master's, or PhD degree in Computer Science or a related technical discipline, with a specialization in AI, machine learning (ML), or security, or equivalent professional experience.
- A minimum of 10 years in software engineering, with significant experience in enterprise-level system architecture.
- At least 7 years of experience in security engineering, encompassing systems security, network security, design evaluations, and threat modeling.
- Proven track record in securing generative AI, LLMs, or agentic systems that have a cross-team impact.
- Demonstrated ownership of AI red-teaming initiatives, guardrail architecture, or defenses against jailbreaks and prompt injections.
- Practical experience in designing data governance and access control frameworks for data and model pipelines.
- Familiarity with frameworks like the OWASP LLM Top 10, including the ability to extend or critique them.
- Hands-on experience with agentic frameworks such as LangChain or LangGraph.
- A history of establishing technical direction and standards that have been adopted by other teams within the organization.
Nice to have
- Over 5 years of programming experience in languages such as Python or Java.
- Knowledge of agentic protocols like A2A or MCP, as well as authentication protocols including PKCE, OIDC, API Keys, and OAuth 2.0.
- Experience in developing and open-sourcing security automation tools or solutions for AI applications.
- A record of industry presentations, publications in high-impact journals, or contributions to identified CVEs in the AI/ML security domain.
- Previous experience in defining AI security strategies at either a company or platform level.
Skills & tools
- Java
- Python
- LangChain
- LangGraph
- OAuth 2.0
- OIDC
- PKCE
- MCP
- A2A
- OWASP LLM Top 10
Practical notes
At ServiceNow, we utilize work personas to assess the level of remote or office-based flexibility available, which is influenced by the distance of your residence from the office. Employment is subject to export control regulations, and roles that require access to controlled technology may need government approval or export licenses. For any application accommodations, please reach out to globaltalentss@servicenow.com.
Join us at ServiceNow and be part of a team that is dedicated to building secure and innovative solutions in the rapidly evolving field of AI. Your expertise will play a crucial role in shaping the future of our products and enhancing the security of our systems. If you are passionate about AI security and looking for a challenging and rewarding opportunity, we encourage you to apply.
About the company
It all started in sunny San Diego, California in 2004 when a visionary engineer, Fred Luddy, saw the potential to transform how we work. Fast forward to today - ServiceNow stands as a global market leader, bringing innovative AI-enhanced technology to over 8,100 customers, including 85% of the Fortune 500®.