Staff Product Manager – Integration Security & AI Gateway

Company Description

It all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could do that for everyone—freeing people from busywork so they could focus on meaningful work. Today, ServiceNow is the AI control tower for business reinvention. Our ServiceNow AI platform brings together any AI, any data, and any workflow— helping 85% of the Fortune 500® work smarter, faster, and better. We're building an AI-native culture where technology and talent are unstoppable together. And we're just getting started.

Join us to put AI to work for people.

Job Description

About the Role

ServiceNow is seeking a Staff Product Manager to own Integration Security and AI Gateway Security — two of the highest-leverage areas in our platform's security foundation. This is an IC4 role on the IAM team within Platform Security, based in Santa Clara. 

As enterprises shift to agentic AI workflows, the products you own become the security backbone for every machine-to-machine interaction: governing how ServiceNow integrates with external systems, how AI agents authenticate and call tools, and how platform teams enforce access control at scale. Your work will directly shape the security posture of thousands of enterprises globally. 

Your Product Portfolio 

• Integration Security 
  • You will own the security layer that governs how ServiceNow connects to the outside world. This spans the protocols, credential frameworks, and trust mechanisms that secure every outbound API call, web service integration, and machine-to-machine interaction — from MCP(Model Context Protocol), REST and SOAP-based integrations to OAuth flows, and mTLS. These capabilities underpin thousands of enterprise integration pipelines running on the ServiceNow platform today. 
• AI Gateway Security 
  • AI Gateway is ServiceNow's enterprise control plane for agentic AI — the governed, in-path intermediary between AI agents and the tools, APIs, and systems they call. As enterprises build distributed AI workflows spanning ServiceNow and external platforms (Copilot Studio, AWS Bedrock, GCP Vertex AI), AI Gateway ensures every agent interaction is authenticated, authorized, observable, and compliant. 
  • You will govern the full lifecycle of MCP (Model Context Protocol) server connections — from onboarding and risk classification to runtime access control and credential mediation — using OAuth 2.1 as the security backbone. You'll build the capabilities that platform teams, security teams, and AI stewards rely on to approve agent access, enforce tool-level policies, and audit every interaction at scale. 
  • AI Gateway is deeply integrated with AI Control Tower and AI Agent Studio, and is positioned as the foundational security and governance layer for ServiceNow's enterprise agentic ecosystem. 

What you get to do in this role:   

• Define and drive the roadmap for Integration Security and AI Gateway Security, balancing near-term customer needs with the long-term agentic AI platform vision. 
• Own the security architecture for MCP server governance — onboarding, risk classification, access control, credential mediation, and audit — using OAuth 2.1 as the foundational trust protocol. 
• Partner with engineering, design, and documentation teams to deliver secure, developer-friendly capabilities from concept to general availability. 
• Engage directly with enterprise customers, security architects, and platform administrators to understand requirements and validate solutions. 
• Translate complex security requirements — including compliance mandates and zero-trust principles — into clear, executable product requirements and user stories. 
• Analyze customer telemetry, support trends, and security landscape shifts to make informed prioritization decisions. 
• Drive cross-functional alignment across Platform Engineering, AI Studio, AI Control Tower, and Workflow Data Fabric to position integration security as a shared platform capability. 
• Act as an accountable owner who drives outcomes regardless of organizational boundaries — proactively removing blockers and escalating risks early. 
• Represent the product area in customer advisory sessions, community forums, security working groups, and executive briefings. 
• Integrate market analysis, usability research, and developer feedback into product requirements to improve adoption and satisfaction. 

Qualifications

Required 

• 8+ years of experience in integration security, API security, Identity & Access Management, or enterprise platform security — with hands-on involveme