Senior Manager Product Security | People Leader

ServiceNow - Chesterfield, MO

Full-time - Senior

Chesterfield, MO

5,001-10,000 employees

Professional, Scientific, and Technical Services

About the position

The Senior Manager Product Security role at ServiceNow involves leading a team focused on software security auditing and research. This position is crucial for overseeing the security of ServiceNow's platform and ensuring the integrity of application security practices. The role emphasizes project management, application security concepts, and the development of innovative security solutions to protect sensitive data and workloads in the cloud.

Responsibilities

• Lead a team of experienced application security professionals focused on the security of ServiceNow's platform and software security research.
• Assist with the development and curation of social media content created by the Security Research team.
• Conduct targeted security audits of the ServiceNow SaaS platform with an emphasis on software security.
• Oversee the development of targeted fuzzing solutions.

Requirements

• 5+ years of experience leading a software security team with an emphasis on scoping and overseeing delivery of application security research and/or software reviews.
• Experience building project plans, managing deadlines, and monitoring project progress.
• Strong verbal communication skills with an emphasis on application remediation processes.
• Ability to deliver technical documentation and communicate technical concepts to both non-technical business users and technical stakeholders.
• In-depth knowledge of common web application vulnerabilities (OWASP Top Ten).
• Developer level proficiency in at least one language - Python, Java, or JavaScript preferred.
• Degree in computer science/engineering, informatics, mathematics/statistics, or equivalent work experience.

Nice-to-haves

• Background working on a Product Security team is preferred.
• Prior experience in application security consulting management preferred.
• Experience developing software fault injection or fuzzing solutions recommended.
• Experience with Threat modeling and threat modeling tools recommended.
• Experience with network and system security hardening recommended.
• MBA degree preferred.

Benefits

• Flexible or remote working options.
• Inclusive work environment that values diverse backgrounds.