Principal Outbound Product Security Manager

About the Position

Principal Outbound Product Security Manager

Santa Clara, California, United States

PLEASE NOTE: This role has a minimum of 2 days per week in a ServiceNow Office. If you are unable to come into the office 2 days per week, please do not apply. Thank you.

---

About the Company

It all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could do that for everyone-freeing people from busywork so they could focus on meaningful work. Today, ServiceNow is the AI control tower for business reinvention. Our ServiceNow AI platform brings together any AI, any data, and any workflow-helping 85% of the Fortune 500® work smarter, faster, and better. We're building an AI-native culture where technology and talent are unstoppable together. And we're just getting started.

Join us to put AI to work for people.

---

The Opportunity

ServiceNow's Product Security organization is undergoing a fundamental transformation-from reactive to proactive, from reporting issues to delivering solutions. This role is critical to that transformation to bridge the gap between cutting-edge AI security challenges and practical, implementable solutions that our engineering teams will actually adopt.

---

Responsibilities

• Own the AI Security Product Strategy (40%)

  • Define and drive the product roadmap for securing agentic AI across internal systems and customer offerings
  • Balance emerging AI threats (prompt injection, model extraction, data poisoning) with implementation realities
  • Transform Red Team findings and security research into a prioritized, data-driven backlog
  • Shift the narrative from "security as tax" to "security as competitive advantage"

• Be the Technical Authority (35%)

  • Lead architectural reviews with deep expertise in:
    • Agentic AI frameworks (LangChain, LangGraph) and their attack surfaces
    • Authentication patterns for distributed AI systems (OAuth 2.0, OIDC, MCP, A2A protocols)
    • LLM vulnerabilities and practical mitigations
  • Provide hands-on guidance that minimizes friction while maximizing protection
  • Earn engineering trust through demonstrated technical depth, not position or process

• Drive Cross-Functional Execution (25%)

  • Partner with Platform and Product Engineering PMs to embed AI security into development lifecycles
  • Define success metrics that balance security effectiveness with developer experience
  • Coordinate with Documentation, Training, and Professional Services for smooth rollouts
  • Engage key enterprise customers on their AI security requirements

---

Requirements

• Experience in leveraging or critically thinking about how to integrate AI into work processes, decision-making, or problem-solving.
• 15+ years in product management, product ownership, or technical product analysis within commercial software product companies. Or similar experience with education.
• 3-5+ years focus on Security, AI Security, or GenAI
• Hands-on experience with agentic AI frameworks and their security implications
• Deep understanding of authentication/authorization protocols and emerging AI-specific patterns
• Track record of shipping security products in collaborative, cross-functional environments
• Technical credibility - ability to read code, review architectures, and challenge technical decisions

---

Nice to Have

• Experience at an AI Security startup or leading AI security at an enterprise company
• Published research, blog posts, or conference talks on AI security
• Security certifications that demonstrate depth (CISSP, OSCP, SANS GIAC)
• Success turning skeptical engineering partners into security champions
• Program management experience driving complex, multi-team initiatives

---

We Offer

• Base pay of $221,200 - $387,100, plus equity (when applicable), variable/incentive compensation, and benefits.
• Health plans, including flexible spending accounts
• 401(k) Plan with company match
• ESPP, matching donations
• Flexible time away plan and family leave programs

---

About the Company

Your work will directly support our transformation goals:

• Protect the Company: Reduce impact of major security incidents and protect ServiceNow's brand reputation.
• Unlock Regulated Markets: Maintain and automate compliance with evolving government requirements (FedRAMP, GDPR, EU AI Act)
• Delight Customers: Ship secure-by-default products that protect customer data without adding complexity to their experience-security that just works.
• Empower Engineering: Partner seamlessly with development teams, shifting security left while enhancing (not hindering) developer productivity through low-friction tools and processes.

---

Why This Role Matters

You'll shape how thousands of enterprises secure their AI implementations while working with industry-leading security researchers and engineers. This high-visibility role reports to the Sr. Director of Product Security Engineering and offers the opportunity to define the future of enterprise AI security.

If you're equally comfortable debating threat models with security researchers and roadmap priorities with VPs of Engineering-and you thrive in turning technical complexity into elegant product solutions-we want to hear from you.

---

Equal Opportunity Employer

ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, gender identity, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements.

---

Accommodations

We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact [email protected] for assistance.

---

Export Control Regulations

For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities.