Description

You will own the implementation and technical delivery of ServiceNow Security Operations (SecOps) solutions.

This role is remote.

Responsibilities

• Implement and configure Security Incident Response (SIR), Vulnerability Response (VR), Threat Intelligence, Security Posture Control (SPC), and Configuration Compliance.
• Build integrations with Microsoft Sentinel, Defender XDR, CrowdStrike, Qualys, Tenable, Rapid7, Splunk, or QRadar using IntegrationHub and Flow Designer.
• Develop custom logic using JavaScript, Glide APIs, Business Rules, Client Scripts, Script Includes, and ACLs.
• Leverage CMDB, Discovery, and Service Mapping to support security operations and vulnerability management.
• Ensure alignment with industry standards including NIST, ISO 27001, CIS Controls, and MITRE ATT&CK.

Required Skills

• Active ServiceNow CIS-SecOps Certification (Mandatory).
• 4–10 years of ServiceNow experience with 3+ years of hands-on SecOps implementation.
• Strong expertise in JavaScript, Glide APIs, and ServiceNow platform development.
• Experience integrating ServiceNow with EDR/SIEM tools (Sentinel, Defender, CrowdStrike, Splunk, QRadar, etc.).
• Understanding of Cyber Security Operations, Vulnerability Management, and Incident Response.
• Knowledge of security frameworks: NIST, ISO 27001, CIS Controls, MITRE ATT&CK.
• Experience with CMDB, Discovery, Service Mapping, and Agile delivery.

Key Skills

Education

Bachelor's degree