Description

Own the design, configuration, and customization of ServiceNow Security Incident Response (SIR) and Vulnerability Response (VR) modules, integrating them with external scanners and CMDB to automate data import and correlation.

This role is on-site.

Responsibilities

• Design and develop workflows, business rules, client scripts, and integrations supporting the SIR and VR lifecycle.
• Configure MID Servers, data sources, and API connections for vulnerability data ingestion.
• Develop automation for vulnerability assignment, remediation tracking, and exception management.
• Create custom dashboards, reports, and Performance Analytics indicators for vulnerability KPIs and trends.
• Collaborate with business and technical stakeholders to ensure alignment with SOC operations and frameworks such as NIST and SANS.

Required Skills

• 12+ years of hands-on development experience in the ServiceNow platform.
• 5+ years of specific experience in Security Incident Response (SIR) and Vulnerability Response (VR) implementation.
• Strong understanding of ServiceNow CMDB, Discovery, and ITSM processes.
• Proficiency in JavaScript, Glide API, Flow Designer, and REST/SOAP integrations.
• Experience integrating with vulnerability scanners (e.g., Qualys, Tenable, Rapid7, Prisma Cloud).
• Experience working with SIEM, SOAR, EDR, and vulnerability tools.
• Understanding of SOC operations and incident response frameworks (NIST, SANS).

Preferred Skills

• Experience with automated vulnerability assignment and exception management logic.

Key Skills

Education

Any Gradute