Principal Outbound Product Security Manager

ServiceNow•Santa Clara, CA

6d•$221,200 - $387,100•Hybrid

About The Position

The ServiceNow Security Organization (SSO) delivers world-class, innovative security solutions to reduce risk and protect the company and our customers. We enable our customers to migrate their most sensitive data and workloads to the cloud, accelerating our business so that we are the most trusted SaaS provider. We create an environment where our employees are proud to work and can make a positive impact. ServiceNow's Product Security organization is undergoing a fundamental transformation—from reactive to proactive, from reporting issues to delivering solutions. This role is critical to that transformation to bridge the gap between cutting-edge AI security challenges and practical, implementable solutions that our engineering teams will actually adopt. This is not a traditional Product Security role. You'll need technical depth to earn credibility with skeptical engineers and product excellence to drive adoption without friction. Our world-class engineering organization needs a security partner they can trust—someone who understands their constraints, speaks their language, and brings solutions, not just problems. Your technical depth must earn their trust, while your product acumen drives adoption of security solutions that enhance, rather than hinder, developer productivity.

Requirements

Experience in leveraging or critically thinking about how to integrate AI into work processes, decision-making, or problem-solving. This may include using AI-powered tools, automating workflows, analyzing AI-driven insights, or exploring AI’s potential impact on the function or industry.
15+ years in product management, product ownership, or technical product analysis within commercial software product companies. Or similar experience with education.
3-5+ years focus on Security, AI Security, or GenAI
Hands-on experience with agentic AI frameworks and their security implications
Deep understanding of authentication/authorization protocols and emerging AI-specific patterns
Track record of shipping security products in collaborative, cross-functional environments
Technical credibility - ability to read code, review architectures, and challenge technical decisions

Nice To Haves

Experience at an AI Security startup or leading AI security at an enterprise company
Published research, blog posts, or conference talks on AI security
Security certifications that demonstrate depth (CISSP, OSCP, SANS GIAC)
Success turning skeptical engineering partners into security champions
Program management experience driving complex, multi-team initiatives

Responsibilities

Define and drive the product roadmap for securing agentic AI across internal systems and customer offerings
Balance emerging AI threats (prompt injection, model extraction, data poisoning) with implementation realities
Transform Red Team findings and security research into a prioritized, data-driven backlog
Shift the narrative from "security as tax" to "security as competitive advantage"
Lead architectural reviews with deep expertise in Agentic AI frameworks (LangChain, LangGraph) and their attack surfaces, Authentication patterns for distributed AI systems (OAuth 2.0, OIDC, MCP, A2A protocols), LLM vulnerabilities and practical mitigations
Provide hands-on guidance that minimizes friction while maximizing protection
Earn engineering trust through demonstrated technical depth, not position or process
Partner with Platform and Product Engineering PMs to embed AI security into development lifecycles
Define success metrics that balance security effectiveness with developer experience
Coordinate with Documentation, Training, and Professional Services for smooth rollouts
Engage key enterprise customers on their AI security requirements