Staff Product Manager (Integration Security & AI Gateway)

Role Overview

Join ServiceNow as a Staff Product Manager owning Integration Security and AI Gateway Security. You will set the security direction for how ServiceNow connects and governs integrations and AI/agent capabilities across enterprises.

Key Missions

• Define and drive the roadmap for integration security and AI gateway security, balancing near-term client needs with long-term AI agentic platform vision.
• Own the security architecture and governance for MCP (Model Context Protocol) servers, including:
  • integration risk classification
  • access control
  • credential mediation
  • auditing
• Use OAuth 2.1 as the foundational protocol of trust.
• Lead outcomes by removing obstacles proactively and escalating risks early.
• Represent the product in:
  • customer advisory sessions
  • community forums
  • security working groups

Responsibilities

• Write product requirements, user stories, and acceptance criteria.
• Guide features from discovery through GA in an agile environment.
• Communicate security trade-offs to both technical teams and non-technical executives.
• Drive cross-functional alignment across engineering, design, QE, security, and legal.
• Translate enterprise security administrator and developer needs into product decisions.

Requirements

• 8+ years experience in integration/API security, IAM, or enterprise platform security, with hands-on work across multiple domains.
• Strong product execution in developer/platform-focused environments.
• Deep protocol expertise including:
  • OAuth 2.0/2.1
  • mTLS
  • REST/SOAP web services
  • credential management
  • outbound integration patterns
• Familiarity with zero-trust, service mesh security, or API gateway architectures.
• Hands-on experience with ServiceNow platform, Integration Hub, or MID Server architecture.
• Strong AI/agentic AI fluency, including knowledge of MCP, A2A, LLM orchestration/agent frameworks, and how to authenticate/authorize/audit AI-to-tool interactions.
• Familiarity with compliance frameworks and their impact on security product design:
  • NIST, SOC 2, ISO 27001, FedRAMP.
• Familiarity with hyperscaler AI platforms (e.g., AWS Bedrock, GCP Vertex AI, Azure OpenAI) and their integration security patterns.
• Experience building/governing AI agent workflows, such as tool-calling security, prompt-injection defenses, and agentic access control.

Nice to Have

• Prior PM experience on developer-facing or platform API products in SaaS/cloud-native environments.
• Experience specifically governing AI-to-tool security at scale and designing agentic access controls.