Verified Tech Jobs & Hiring Companies, Updated Every 24 Hours

About the team The Security and Risk Engineering organization builds scalable, AI-powered security solutions that reduce risk and protect ServiceNow and its customers. We value AI-first thinking, clean architecture, intuitive experiences, and a culture of continuous learning. This is a zero-to-one incubation. We’re building a new class of exposure analysis that ranks security work by exploitability—where an attacker could realistically get in—rather than raw severity. The architecture is evolving, and this role helps define what good looks like. The role As a Senior ML Engineer, you build core components of a novel exploitability engine—shipping production ML that turns raw security signal into ranked, reachable attack paths. You take well-scoped problems from design to production and grow into deeper ownership as the system matures. What you’ll own Well-scoped components of the engine—evidence ingestion and connectors, entity resolution, graph construction, or parts of the probability core—built to production quality. The correctness and reliability of what you ship: tests, evaluation, observability, and the metrics that show your component works. Turning ambiguous requirements into working code, with guidance on the calls that shape the wider system. The data and model plumbing that keeps the graph accurate—entity-resolution quality, evidence provenance, and decay. What you’ll do Design, build, test, and operate production ML components with strong engineering fundamentals. Contribute to design and code reviews, and help raise the quality bar on the team. Prototype quickly to evaluate new AI capabilities against real cybersecurity problems. Partner with product, security R&D, and SecOps to understand the problem behind the ticket. Apply AI safety, security, and guardrail practices to what you build. What you bring Solid software engineering fundamentals and experience operating production-quality software. Hands-on experience building ML- or LLM-powered applications—RAG, embeddings, agents, or probabilistic or ML-driven scoring. Experience taking a prototype to a reliable, maintainable production solution. Working knowledge of distributed systems, APIs, cloud-native development, and data or graph systems. Strong Python, and/or Java, Go, or TypeScript. Interest in security problems—vulnerability management, identity security, threat detection, or risk prioritization. Experience with AI-assisted development tools and coding agents such as Claude Code, Codex, Cursor, or Windsurf is a plus. Experience with AI evaluation, safety, or guardrails is a plus. 3+ years of software engineering experience, or equivalent practical experience. Experience designing and delivering production software systems. Experience building or integrating AI/ML-powered applications in a production or near-production environment. Modern AI experience: LLMs, RAG, embeddings, vector search, agentic workflows, model evaluation, or AI observability. Strong programming experience in Python and/or Java, Go, or a similar language. Cloud-native technologies, distributed systems, APIs, databases, and scalable architectures. Bachelor’s or Master’s degree in Computer Science, Artificial Intelligence, Machine Learning, or a related technical discipline, or equivalent practical experience. Cybersecurity or security-product experience is a plus. For positions in this location, we offer a base pay of $143,200 - $243,400 , plus equity (when applicable), variable/incentive compensation and benefits. Sales positions generally offer a competitive On Target Earnings (OTE) incentive compensation structure. Please note that the base pay shown is a guideline, and individual total compensation will vary based on factors such as qualifications, skill level, competencies, and work location. We also offer health plans, including flexible spending accounts, a 401(k) Plan with company match, ESPP, matching donations, a flexible time away plan and family leave programs. Compensation is based on the geographic location in which the role is located and is subject to change based on work location. Work Personas We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here . To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service. Equal Opportunity Employer ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, gender identity, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements. Accommodations We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact globaltalentss@servicenow.com for assistance. Export Control Regulations For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities. From Fortune. ©2026 Fortune Media IP Limited. All rights reserved. Used under license.

ServiceNow seeks a Staff Application Security Engineer to serve as the technical core of our bug bounty program within the Product Security Incident Response Team (PSIRT). This is the senior engineer who owns bug bounty reports from intake through resolution: reproducing and validating the vulnerability, assessing its severity, and seeing it through to a verified fix. The work is deeply technical. Reproducing a vulnerability is only the starting point. From there you read the underlying code, identify root cause, and either propose the fix or design it alongside engineering before confirming it holds. You are also the person researchers deal with directly, which makes clear, credible communication as central to the role as the technical analysis itself. As one of the most senior engineers on the team, you will set the standard for how triage is done and mentor earlier-career engineers. Beyond the bug bounty queue, you will conduct variant hunts, perform original platform security research, lead major product security incidents, and run forensic postmortems when a significant issue reaches production. Key Responsibilities Triage and Resolve Bug Bounty Reports Own incoming reports end-to-end: intake, reproduction, severity scoring, root cause analysis, fix verification, and final disposition. Reproduce and validate reported vulnerabilities, building out incomplete proof-of-concept code where needed. Serve as the technical escalation point for the most complex and highest-severity reports, including multi-step exploit chains and cross-system issues. Perform code review and root cause analysis to identify the underlying defect rather than the reported symptom. Propose remediations, or design them with engineering, and verify the fix resolves the issue. Assign and defend severity ratings using the program's severity framework. Route issues to owning teams, file and track defects, and keep vulnerability records accurate through closure. Own Researcher and Stakeholder Communication Act as ServiceNow's primary technical point of contact for bug bounty researchers across the full lifecycle of a report. Handle severity and validity disputes directly, keeping every exchange clear, timely, respectful, and technically credible. Translate technical findings for internal stakeholders and keep engineering and leadership current on status and risk. Mentor the Team and Raise Triage Standards Provide technical mentorship to earlier-career PSIRT engineers, developing depth in reproduction, code analysis, severity judgment, and communication. Set and maintain the bar for triage quality and strengthen program practices over time. Lead Advanced Security Work Beyond Triage Conduct variant hunts to find related instances of reported vulnerabilities before they are discovered externally. Perform original platform security research to surface issues ahead of external researchers. Lead major product security incidents on the PSIRT side, coordinating response across teams under pressure. Run forensic postmortems after significant incidents to determine how the issue reached production, including how design-level flaws bypassed release processes, and confirm that remediations hold. To be successful in this role, you have: 8+ years of hands-on experience in product security, application security, penetration testing, or vulnerability research. Depth of expertise matters more than years. Expertise in: Common web and application vulnerability classes and exploitation techniques. Vulnerability reproduction, severity assessment, and defensible risk scoring under ambiguity. Coordinated vulnerability disclosure. Code and development fluency: Strong code comprehension in Java, JavaScript, and Python, with the ability to trace root cause in large, unfamiliar codebases and review pull requests. Ability to write code and propose concrete fixes. This is not an application-building role, but you reason fluently in code. Working knowledge of Git, Gradle, Maven, CI/CD pipelines, and secure SDLC. Proficiency with Claude Code or equivalent AI coding assistant for code comprehension and security research. Exceptional written communication. You will represent ServiceNow directly to external researchers, frequently in disagreement, and bridge those researchers and internal engineering. This is a core requirement of the role, not a supporting skill. Work Personas We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here . To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service. Equal Opportunity Employer ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, gender identity, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements. Accommodations We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact globaltalentss@servicenow.com for assistance. Export Control Regulations For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities. From Fortune. ©2026 Fortune Media IP Limited. All rights reserved. Used under license.

Team Overview Platform Security Core builds foundational security infrastructure and AI-driven detection systems for enterprise-scale operations. Our mission is to make security proactive, intelligent, and seamlessly integrated into the ServiceNow platform. We are looking for a hands-on Senior Staff Engineer (Technical Leader) with deep expertise in machine learning systems, inference engines, and security architecture to lead next-generation AI security initiatives. Role Summary As a Senior Staff AI Security Engineer, you will architect and deliver enterprise-scale AI security solutions that integrate machine learning, reasoning engines, and real-time inference into core security systems. You will bring strong technical leadership, hands-on machine learning depth, and the ability to design and operate intelligent security systems that learn and adapt. What You Get to Do in This Role Design and implement ML-driven security systems: Build machine learning algorithms for identity risk assessment, anomalous access detection, malware classification, and sensitive data discovery, applying agent guardrails, correlation from telemetry to detect misuse or malicious intent. Build inference engines and reasoning systems: Architect high-performance inference pipelines and contextual reasoning systems that apply models in real-time across distributed security decisions. Integrate AI into access control and identity: Apply machine learning to access control decisions—contextual analysis, adaptive authentication, behavioral biometrics, and identity confidence scoring. Develop attack detection and threat classification: Build ML models for malware detection, anomaly detection, and threat pattern recognition with focus on false-positive reduction, operational efficiency, precision and recall scores. Implement sensitive data detection and classification: Design AI systems for PII detection, data classification, and sensitive information governance at scale. Lead complex technical initiatives: Provide technical leadership for multi-quarter efforts that combine ML research, systems engineering, and security domain expertise. Architect modular, reusable ML systems: Build ML platforms, feature engineering frameworks, and model management infrastructure that teams can adopt and extend. Operate production AI systems: Design for observability, model performance monitoring, retraining workflows, and safe model deployment in security-critical environments. Collaborate across security and infrastructure: Work with teams across identity, access control, threat detection, and infrastructure to integrate AI solutions end-to-end. Research and evaluate emerging AI techniques: Stay current with advances in AI/ML—transformer models, reasoning engines, retrieval-augmented generation—and evaluate their applicability to security problems. To be successful in this role you have: Core Experience Bachelor's degree with 10+ years of software development experience; OR Master's degree with 8+ years; OR PhD with 6+ years; OR equivalent work experience. Hands-on experience implementing machine learning algorithms from scratch—not just using libraries, but understanding how models work at a fundamental level. Deep programming expertise in Java and/or Python, including systems-level knowledge and performance optimization. Proven track record building and deploying machine learning systems in production environments at significant scale. Strong fundamentals in computer science: algorithms, data structures, complexity analysis, system design, and distributed systems. AI/ML Systems Expertise Deep understanding of machine learning fundamentals: supervised learning, unsupervised learning, model evaluation, feature engineering, and model selection. Hands-on experience with neural networks, deep learning frameworks (TensorFlow, PyTorch), and modern model architectures. Experience training, tuning, and deploying models: hyperparameter optimization, regularization, preventing overfitting, and achieving production-grade model quality. Understanding of model inference: latency optimization, quantization, model serving infrastructure, and real-time prediction pipelines. Experience with LLMs and large-scale foundation models: fine-tuning, retrieval-augmented generation (RAG), prompt engineering at scale, and understanding of model weights and token economies. Knowledge of reasoning and agentic systems: how to apply contextual analysis, multi-step reasoning, and decision logic on top of models. Experience with feature engineering, feature stores, and ML data pipelines at scale. Familiarity with model observability and monitoring: detecting model drift, performance degradation, and retraining strategies. Security Architecture Expertise Deep knowledge of identity and access control systems: how authentication, authorization, and access decisions flow through enterprise systems. Experience applying machine learning to security problems: anomaly detection, attack classification, risk scoring, and threat pattern recognition. Understanding of sensitive data landscapes: PII detection, data classification frameworks, and data governance strategies. Familiarity with security operations: how detection systems, alert triage, and incident response workflows operate at scale. Knowledge of common attack patterns and threat models relevant to enterprise security. Experience integrating security solutions with platform infrastructure: API design, event streaming, and decision-making in critical paths. Nice to Have Experience with Kafka, stream processing, or real-time data systems for security applications. Hands-on work with cryptography, zero-trust architectures, or OAuth/mTLS. Experience deploying models in regulated environments with compliance and governance requirements. Track record mentoring junior engineers and driving technical excellence across teams. Open-source contributions to ML or security projects. For positions in this location, we offer a base pay of $190,900 - $334,100 , plus equity (when applicable), variable/incentive compensation and benefits. Sales positions generally offer a competitive On Target Earnings (OTE) incentive compensation structure. Please note that the base pay shown is a guideline, and individual total compensation will vary based on factors such as qualifications, skill level, competencies, and work location. We also offer health plans, including flexible spending accounts, a 401(k) Plan with company match, ESPP, matching donations, a flexible time away plan and family leave programs. Compensation is based on the geographic location in which the role is located and is subject to change based on work location. Work Personas We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here . To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service. Equal Opportunity Employer ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, gender identity, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements. Accommodations We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact globaltalentss@servicenow.com for assistance. Export Control Regulations For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities. From Fortune. ©2026 Fortune Media IP Limited. All rights reserved. Used under license.

Due to Federal requirements, only US citizens, US naturalized citizens or US Permanent Residents, holding a green card, will be considered. PLEASE DO NOT APPLY IF YOU DON'T MEET THIS FEDERAL REQUIRMENT The ServiceNow Security Organization (SSO) The ServiceNow Security Organization (SSO) delivers world-class, innovative security solutions to reduce risk and protect the company and our customers. We enable our customers to migrate their most sensitive data and workloads to the cloud, accelerating our business so that we are the most trusted SaaS provider. We create an environment where our employees are proud to work and can make a positive impact About the role Our security teams pull data from a lot of separate systems. Asset inventory, identity governance, detection tooling, and threat intel all live in different places, so answering a basic question like which systems an attacker could reach from a compromised account can take a security analyst most of a day. We're building a platform that connects those systems behind a shared API and knowledge layer so those questions can be answered in seconds. We are not replacing the source systems or copying their data. You would be a senior individual contributor on a small team, responsible for whole areas of the platform: designing the API contracts, building the services behind them, getting them into production, and working with partner teams to actually adopt them. This is a hands-on role. You will write code, define interfaces other teams build against, and work directly with stakeholders in detection engineering, red team, blue team, and identity and asset management. What you'll do Design and build the platform's core APIs, covering context retrieval, risk scoring, entity resolution, data contracts, and coverage queries. Build and run asynchronous data pipelines on a message bus with a governed schema registry. Integrate security data sources including SIEM, identity governance, asset inventory, and our knowledge graph. Own platform workstreams from scoping through delivery, including the cross-team coordination that takes. Write design proposals and review other people's, as part of the platform's RFC process. Review code, mentor engineers on partner teams who contribute to the platform, and keep the technical documentation usable. Required qualifications Experience in leveraging or critically thinking about how to integrate AI into work processes, decision-making, or problem-solving. This may include using AI-powered tools, automating workflows, analyzing AI-driven insights, or exploring AI’s potential impact on the function or industry. 12+ years of professional software engineering experience, including systems you have operated in production and not just shipped. OR SIMILAR EXPERIENCE WITH EDUCATION Expert-level Python: data processing at scale, API development, and real testing discipline in a production codebase. Deep hands-on Splunk experience. SPL, data onboarding and normalization, search performance tuning, and working with the Splunk APIs. Software architecture ownership on distributed or data-intensive systems. You have defined service and API boundaries, documented the tradeoffs, and revised a design when the requirements moved. A real cybersecurity background: security operations, detection engineering, threat detection, incident response, or security data engineering. You should know how security telemetry gets produced and consumed, and be comfortable with frameworks like MITRE ATT&CK. Project ownership at a senior IC level. You have taken an initiative from a vague problem statement to a delivered result, worked across team boundaries to do it, and kept engineering leadership informed without needing to be managed through it. Beneficial qualifications Data science experience: statistical analysis, feature engineering, anomaly detection, or building and evaluating models against noisy operational data. Applied AI or ML experience, particularly LLM-based systems, retrieval-augmented generation, knowledge graphs, or agentic workflows, along with some interest in the security side of enterprise AI adoption. Experience with identity governance or asset inventory platforms. Experience defining data contracts or governance models for internal platform consumers. First year By the end of your first year you own one or more of the platform's core APIs, partner teams are building against contracts you wrote, and you are one of the people whose opinion carries weight in architecture and design discussions for the program. #SecurityJobs For positions in this location, we offer a base pay of $190,900 - $334,100 , plus equity (when applicable), variable/incentive compensation and benefits. Sales positions generally offer a competitive On Target Earnings (OTE) incentive compensation structure. Please note that the base pay shown is a guideline, and individual total compensation will vary based on factors such as qualifications, skill level, competencies, and work location. We also offer health plans, including flexible spending accounts, a 401(k) Plan with company match, ESPP, matching donations, a flexible time away plan and family leave programs. Compensation is based on the geographic location in which the role is located and is subject to change based on work location. Work Personas We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here . To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service. Equal Opportunity Employer ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, gender identity, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements. Accommodations We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact globaltalentss@servicenow.com for assistance. Export Control Regulations For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities. From Fortune. ©2026 Fortune Media IP Limited. All rights reserved. Used under license.