Principal Engineer

Who you are

• Experience in leveraging or critically thinking about how to integrate AI into work processes, decision-making, or problem-solving. This may include using AI-powered tools, automating workflows, analyzing AI-driven insights, or exploring AI’s potential impact on the function or industry
• 15+ years of relevant experience in security and software engineering, including hands-on technical leadership, or similar experience with education
• Deep, current expertise in AI security — LLM and generative-AI threats, agentic-AI risk, prompt and response protection, AI/ML supply chain, and AI governance frameworks
• Strong architecture and engineering skills across cloud and SaaS environments, and the ability to build and operate controls directly, not only design them
• Experience with data security tooling (DSPM/AISPM, DLP, CASB) and identity/entitlement controls
• A track record of translating complex technical risk into executive-, board-, and auditor-ready narratives
• Strong problem-solving across security and software engineering, and the ability to apply data for diagnostics and to make the case for new solutions
• Working knowledge of compliance and regulatory standards, and experience in Agile practices
• Ability to build trusted relationships with security and engineering teams across the company
• You must be eligible for adjudication to access our US regulated market environments. Permanent residency or citizenship is required

What the job involves

• This position reports to the Director, Endpoint Security Engineering (ESE) and anchors the AI Security Governance Program — a board-visible, auditor-facing program spanning five control pillars (AI visibility & inventory, prompt & response protection, agent architecture & control, shadow AI & access control, and compliance & audit) and the enterprise AI risks reported to the Audit Committee
• The team builds state-of-the-art controls that reduce risk to the company’s most sensitive AI-connected assets with the least possible impact on operations, and shifts the perception of security from blocker to enabler
• As Principal Engineer for AI Security Governance, you will own the technical strategy, architecture, and hands-on delivery of the program end to end
• You will set direction across two governance tracks — enterprise-wide AI traffic and ServiceNow platform AI — and personally build and mature the controls that enforce it
• This is a senior individual-contributor role: you will lead through technical authority, architecture, and mentorship rather than direct-report management, and you will be a driving force in ServiceNow’s internal AI transformation, moving the security function from manual effort toward AI-automated operations
• Own the vision, strategy, and roadmap for the AI Security Governance Program across all five control pillars
• Architect controls across both the enterprise-AI and platform-AI tracks, keeping the two governance paths distinct and defensible
• Deploy, configure, and mature security controls hands-on — including AI detection and response, data security posture management (DSPM/AISPM), and data-path controls for unmanaged access
• Drive the shift from manual security operations to AI-automated workflows, building automation into every control rather than staffing around it
• Close the highest-severity gaps in AI data protection, agent permissions, and shadow AI
• Author and sustain the risk narrative and technical materials for CISO, board, and Audit Committee audiences to a standard of precision that never overclaims
• Provide technical leadership and mentorship to engineers and cross-functional partners, and bring data to every decision

Benefits

• Generous family leave
• Matched donations
• Annual learning stipends
• Flexible PTO
• Competitive retirement plan
• Paid volunteer time