ServiceNow Principal Security Research Program One-Pager

ServiceNow

Senior Principal Security Research Scientist

Context

Led advanced security research across product security, application security, and AI risk management at ServiceNow — one of the most widely deployed enterprise workflow platforms. Conducted deep-dive reviews, consulted with PSIRT, and collaborated with the Red Team on emerging AI voice threat research.

Problem

A globally deployed enterprise SaaS platform expanding into AI-augmented workflows required rigorous security research capability — not just reactive patching, but proactive threat discovery across web, database, Linux virtualization, and novel AI attack surfaces including voice interaction systems.

What I did

• - Conduct deep-dive security research across ProdSec, AppSec, and AI risk management disciplines.
• - Perform threat modeling and security analysis for web application, database, and Linux virtualization security surfaces.
• - Consult with PSIRT on complex vulnerability disclosure, triage, and engineering response.
• - Collaborate with the Red Team to research and characterize AI voice threat scenarios — attack surface, manipulation vectors, and detection gaps.
• - Translate research findings into actionable security controls and architectural guidance for product engineering.

Outcome

• - Delivered proactive security research that surfaced vulnerabilities before exploitation across critical platform surfaces.
• - Established research-informed PSIRT consultation patterns that improved triage quality and response velocity.
• - Produced AI voice threat research that informed the company's evolving AI security posture and red team capability.
• - Advanced the organization's product security and AppSec research capability across 3+ years of sustained principal-level work.

Evidence

• - 3.5 years as Senior Principal Security Research Scientist at a globally deployed enterprise SaaS platform.
• - Research scope covered web, database, Linux virtualization, and AI voice attack surfaces.
• - PSIRT consultation role bridged research depth with operational vulnerability response.