Product Security Engineer Jobs in California
Product Security Engineer jobs in California are among the most active in the country, concentrated in technology, defense, fintech, and enterprise software across a seniority range from entry-level application security analyst through principal and staff engineer. The largest hiring centers are the San Francisco Bay Area, San Diego, and Los Angeles, where employers such as Google, Qualcomm, and Apple maintain significant security engineering teams. The most in-demand specialties in California right now are secure software development lifecycle (SSDLC), threat modeling, and cloud-native application security. Find a role that fits below and apply directly.
Find JobsOverview
Showing 4 of 73+ Product Security Engineer jobs
It all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could do that for everyone—freeing people from busywork so they could focus on meaningful work. Today, ServiceNow is the AI control tower for business reinvention. Our ServiceNow AI platform brings together any AI, any data, and any workflow— helping 85% of the Fortune 500® work smarter, faster, and better. We're building an AI-native culture where technology and talent are unstoppable together. And we're just getting started.
Join us to put AI to work for people.
Job Description
**PLEASE NOTE** This role has a minimum of 2 days per week in a ServiceNow Office.
If you are unable to come into the office 2 days per week, please do not apply. Thank you.
The ServiceNow Security Organization (SSO)
The ServiceNow Security Organization (SSO) delivers world-class, innovative security solutions to reduce risk and protect the company and our customers. We enable our customers to migrate their most sensitive data and workloads to the cloud, accelerating our business so that we are the most trusted SaaS provider. We create an environment where our employees are proud to work and can make a positive impact
The Opportunity
ServiceNow's Product Security organization is undergoing a fundamental transformation—from reactive to proactive, from reporting issues to delivering solutions. This role is critical to that transformation to bridge the gap between cutting-edge AI security challenges and practical, implementable solutions that our engineering teams will actually adopt.
This is not a traditional Product Security role. You'll need technical depth to earn credibility with skeptical engineers and product excellence to drive adoption without friction.
The Challenge
Our world-class engineering organization needs a security partner they can trust—someone who understands their constraints, speaks their language, and brings solutions, not just problems. Your technical depth must earn their trust, while your product acumen drives adoption of security solutions that enhance, rather than hinder, developer productivity.
Our Guiding Principles
- Protect the Brand: Reduce the impact of major security incidents.
- Enable the Business: Maintain and automate regulatory compliance (FedRAMP, GDPR, etc.).
- Secure by Default: Ship secure products with minimal friction for customers.
- Partner Seamlessly: Integrate security ("shift left") without slowing down engineering.
What You'll Do
- Own the AI Security Product Strategy (40%)
- Define and drive the product roadmap for securing agentic AI across internal systems and customer offerings
- Balance emerging AI threats (prompt injection, model extraction, data poisoning) with implementation realities
- Transform Red Team findings and security research into a prioritized, data-driven backlog
- Shift the narrative from "security as tax" to "security as competitive advantage"
Be the Technical Authority (35%)
- Lead architectural reviews with deep expertise in:
- Agentic AI frameworks (LangChain, LangGraph) and their attack surfaces
- Authentication patterns for distributed AI systems (OAuth 2.0, OIDC, MCP, A2A protocols
- LLM vulnerabilities and practical mitigations
- Provide hands-on guidance that minimizes friction while maximizing protection
- Earn engineering trust through demonstrated technical depth, not position or process
Drive Cross-Functional Execution (25%)
- Partner with Platform and Product Engineering PMs to embed AI security into development lifecycles
- Define success metrics that balance security effectiveness with developer experience
- Coordinate with Documentation, Training, and Professional Services for smooth rollouts
- Engage key enterprise customers on their AI security requirements
To succeed in this role, you have:
- Experience in leveraging or critically thinking about how to integrate AI into work processes, decision-making, or problem-solving. This may include using AI-powered tools, automating workflows, analyzing AI-driven insights, or exploring AI’s potential impact on the function or industry.
- 15+ years in product management, product ownership, or technical product analysis within commercial software product companies. Or similar experience with education.
- 3-5+ years focus on Security, AI Security, or GenAI
- Hands-on experience with agentic AI frameworks and their security implications
- Deep understanding of authentication/authorization protocols and emerging AI-specific patterns
- Track record of shipping security products in collaborative, cross-functional environments
- Technical credibility - ability to read code, review architectures, and challenge technical decisions
Qualifications
What Sets Great Candidates Apart
- Experience at an AI Security startup or leading AI security at an enterprise company
- Published research, blog posts, or conference talks on AI security
- Security certifications that demonstrate depth (CISSP, OSCP, SANS GIAC)
- Success turning skeptical engineering partners into security champions
- Program management experience driving complex, multi-team initiatives
The Intangibles We Value
- Exceptional communication - can influence both senior engineers and executives
- Data-driven decision making with strong product instincts
- Comfortable with ambiguity in a rapidly evolving domain
- Builder mentality - more interested in shipping solutions than writing reports
Our Four Guiding Principles
Your work will directly support our transformation goals:
- Protect the Company: Reduce impact of major security incidents and protect ServiceNow's brand reputation.
- Unlock Regulated Markets: Maintain and automate compliance with evolving government requirements (FedRAMP, GDPR, EU AI Act)
- Delight Customers: Ship secure-by-default products that protect customer data without adding complexity to their experience—security that just works.
- Empower Engineering: Partner seamlessly with development teams, shifting security left while enhancing (not hindering) developer productivity through low-friction tools and processes.
Why This Role Matters
You'll shape how thousands of enterprises secure their AI implementations while working with industry-leading security researchers and engineers. This high-visibility role reports to the Sr. Director of Product Security Engineering and offers the opportunity to define the future of enterprise AI security.
If you're equally comfortable debating threat models with security researchers and roadmap priorities with VPs of Engineering—and you thrive in turning technical complexity into elegant product solutions—we want to hear from you.
#SecurityJobs
For positions in this location, we offer a base pay of $221,200 - $387,100, plus equity (when applicable), variable/incentive compensation and benefits. Sales positions generally offer a competitive On Target Earnings (OTE) incentive compensation structure. Please note that the base pay shown is a guideline, and individual total compensation will vary based on factors such as qualifications, skill level, competencies, and work location. We also offer health plans, including flexible spending accounts, a 401(k) Plan with company match, ESPP, matching donations, a flexible time away plan and family leave programs. Compensation is based on the geographic location in which the role is located and is subject to change based on work location.
Additional Information
Work Personas
We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service.
Equal Opportunity Employer
ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, gender identity, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements.
Accommodations
We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact globaltalentss@servicenow.com for assistance.
Export Control Regulations
For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities.
From Fortune. ©2026 Fortune Media IP Limited. All rights reserved. Used under license.
It all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could do that for everyone—freeing people from busywork so they could focus on meaningful work. Today, ServiceNow is the AI control tower for business reinvention. Our ServiceNow AI platform brings together any AI, any data, and any workflow— helping 85% of the Fortune 500® work smarter, faster, and better. We're building an AI-native culture where technology and talent are unstoppable together. And we're just getting started.
Join us to put AI to work for people.
Job Description
**PLEASE NOTE** This role has a minimum of 2 days per week in a ServiceNow Office.
If you are unable to come into the office 2 days per week, please do not apply. Thank you.
The ServiceNow Security Organization (SSO)
The ServiceNow Security Organization (SSO) delivers world-class, innovative security solutions to reduce risk and protect the company and our customers. We enable our customers to migrate their most sensitive data and workloads to the cloud, accelerating our business so that we are the most trusted SaaS provider. We create an environment where our employees are proud to work and can make a positive impact
The Opportunity
ServiceNow's Product Security organization is undergoing a fundamental transformation—from reactive to proactive, from reporting issues to delivering solutions. This role is critical to that transformation to bridge the gap between cutting-edge AI security challenges and practical, implementable solutions that our engineering teams will actually adopt.
This is not a traditional Product Security role. You'll need technical depth to earn credibility with skeptical engineers and product excellence to drive adoption without friction.
The Challenge
Our world-class engineering organization needs a security partner they can trust—someone who understands their constraints, speaks their language, and brings solutions, not just problems. Your technical depth must earn their trust, while your product acumen drives adoption of security solutions that enhance, rather than hinder, developer productivity.
Our Guiding Principles
- Protect the Brand: Reduce the impact of major security incidents.
- Enable the Business: Maintain and automate regulatory compliance (FedRAMP, GDPR, etc.).
- Secure by Default: Ship secure products with minimal friction for customers.
- Partner Seamlessly: Integrate security ("shift left") without slowing down engineering.
What You'll Do
- Own the AI Security Product Strategy (40%)
- Define and drive the product roadmap for securing agentic AI across internal systems and customer offerings
- Balance emerging AI threats (prompt injection, model extraction, data poisoning) with implementation realities
- Transform Red Team findings and security research into a prioritized, data-driven backlog
- Shift the narrative from "security as tax" to "security as competitive advantage"
Be the Technical Authority (35%)
- Lead architectural reviews with deep expertise in:
- Agentic AI frameworks (LangChain, LangGraph) and their attack surfaces
- Authentication patterns for distributed AI systems (OAuth 2.0, OIDC, MCP, A2A protocols
- LLM vulnerabilities and practical mitigations
- Provide hands-on guidance that minimizes friction while maximizing protection
- Earn engineering trust through demonstrated technical depth, not position or process
Drive Cross-Functional Execution (25%)
- Partner with Platform and Product Engineering PMs to embed AI security into development lifecycles
- Define success metrics that balance security effectiveness with developer experience
- Coordinate with Documentation, Training, and Professional Services for smooth rollouts
- Engage key enterprise customers on their AI security requirements
To succeed in this role, you have:
- Experience in leveraging or critically thinking about how to integrate AI into work processes, decision-making, or problem-solving. This may include using AI-powered tools, automating workflows, analyzing AI-driven insights, or exploring AI’s potential impact on the function or industry.
- 15+ years in product management, product ownership, or technical product analysis within commercial software product companies. Or similar experience with education.
- 3-5+ years focus on Security, AI Security, or GenAI
- Hands-on experience with agentic AI frameworks and their security implications
- Deep understanding of authentication/authorization protocols and emerging AI-specific patterns
- Track record of shipping security products in collaborative, cross-functional environments
- Technical credibility - ability to read code, review architectures, and challenge technical decisions
Qualifications
What Sets Great Candidates Apart
- Experience at an AI Security startup or leading AI security at an enterprise company
- Published research, blog posts, or conference talks on AI security
- Security certifications that demonstrate depth (CISSP, OSCP, SANS GIAC)
- Success turning skeptical engineering partners into security champions
- Program management experience driving complex, multi-team initiatives
The Intangibles We Value
- Exceptional communication - can influence both senior engineers and executives
- Data-driven decision making with strong product instincts
- Comfortable with ambiguity in a rapidly evolving domain
- Builder mentality - more interested in shipping solutions than writing reports
Our Four Guiding Principles
Your work will directly support our transformation goals:
- Protect the Company: Reduce impact of major security incidents and protect ServiceNow's brand reputation.
- Unlock Regulated Markets: Maintain and automate compliance with evolving government requirements (FedRAMP, GDPR, EU AI Act)
- Delight Customers: Ship secure-by-default products that protect customer data without adding complexity to their experience—security that just works.
- Empower Engineering: Partner seamlessly with development teams, shifting security left while enhancing (not hindering) developer productivity through low-friction tools and processes.
Why This Role Matters
You'll shape how thousands of enterprises secure their AI implementations while working with industry-leading security researchers and engineers. This high-visibility role reports to the Sr. Director of Product Security Engineering and offers the opportunity to define the future of enterprise AI security.
If you're equally comfortable debating threat models with security researchers and roadmap priorities with VPs of Engineering—and you thrive in turning technical complexity into elegant product solutions—we want to hear from you.
#SecurityJobs
For positions in this location, we offer a base pay of $221,200 - $387,100, plus equity (when applicable), variable/incentive compensation and benefits. Sales positions generally offer a competitive On Target Earnings (OTE) incentive compensation structure. Please note that the base pay shown is a guideline, and individual total compensation will vary based on factors such as qualifications, skill level, competencies, and work location. We also offer health plans, including flexible spending accounts, a 401(k) Plan with company match, ESPP, matching donations, a flexible time away plan and family leave programs. Compensation is based on the geographic location in which the role is located and is subject to change based on work location.
Additional Information
Work Personas
We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service.
Equal Opportunity Employer
ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, gender identity, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements.
Accommodations
We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact globaltalentss@servicenow.com for assistance.
Export Control Regulations
For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities.
From Fortune. ©2026 Fortune Media IP Limited. All rights reserved. Used under license.
See All 73 Product Security Engineer Jobs in California
Find roles in California that match your experience and apply in just a few clicks.
Find JobsProduct Security Engineer Jobs by City in California
Where California roles are concentrated, by current openings.
Product Security Engineer Job Market in California
A snapshot from current California openings, updated as new roles post.
Who's Hiring
Top Industries Hiring
- Technology & Software
- Electronics & Hardware
- Banking & Financial Services
- Artificial Intelligence
- Consulting & Professional Services
What California Employers Look For
The qualifications that appear most often in product security engineer jobs across California.
- Bachelor's degree in computer science, cybersecurity, or a closely related technical field
- Hands-on experience with secure code review, threat modeling, and vulnerability assessment
- Proficiency in at least one major programming language such as Python, Java, or Go
- Relevant certification such as CISSP, CEH, or GWEB recognized by California-based hiring teams
- Familiarity with cloud security on AWS, Google Cloud, or Azure environments
- Experience applying OWASP Top 10 principles and NIST Cybersecurity Framework controls
Product Security Engineer Jobs in California: Frequently Asked Questions
How do you become a product security engineer in California?
A bachelor's degree in computer science, cybersecurity, or software engineering is the standard starting point for this role in California. California does not require a state-issued license to work as a product security engineer, but employers consistently prioritize candidates who hold industry credentials such as CISSP, OSCP, or GWAPT. Building a portfolio of security research, bug bounty submissions, or open-source contributions strengthens applications considerably at California technology and defense firms.
Which companies hire product security engineers in California?
Employers hiring product security engineers in California right now include Palo Alto Networks, Rivian and Volkswagen Group Technologies, and SanDisk, based on current listings on Migrate Mate as of September 2026. California's density of technology headquarters, defense contractors, and fintech firms means demand for this role stays broad across both large enterprises and well-funded growth-stage companies.
Which California cities have the most product security engineer jobs?
San Francisco, Santa Clara, and San Jose account for the largest share of product security engineer openings in California. The Bay Area leads because of its concentration of major technology headquarters and cloud infrastructure companies, while San Diego draws significant volume from defense and cybersecurity contractors, and Los Angeles reflects demand from media technology, fintech, and enterprise software employers headquartered there.
Are there remote product security engineer jobs in California?
Yes, and more than most engineering disciplines. Product security work is largely code review, threat modeling, and documentation-based, making it well suited to remote arrangements. About 74% of product security engineer openings tied to California are remote or hybrid as of September 2026. The tasks most commonly performed remotely are secure code review and security architecture review, while on-site presence is more common for roles supporting classified or hardware-dependent programs.
How can I get hired as a product security engineer in California with little or no experience?
The most realistic entry path is moving from a software engineering or IT security analyst role into application security. Large California technology employers such as those in the Bay Area and San Diego run early-career security programs, rotational engineering tracks, and university-hire initiatives that consider candidates without dedicated security experience. Completing a recognized certification such as CompTIA Security+ or eJPT, building a bug bounty history on platforms open to the public, and targeting titles such as application security analyst or associate security engineer opens the door to product security teams.
Where can I find and apply to product security engineer jobs in California?
You can find and apply to product security engineer jobs in California on Migrate Mate, which lists current California openings updated regularly. Find the roles that fit your experience and location, then apply directly to the employer through the listing.
See All 73 Product Security Engineer Jobs in California
Find roles in California that match your experience and apply in just a few clicks.
Find Jobs