Role: ServiceNow SecOps VR - Senior Consultant
Location: Vienna, VA (Onsite)
Job Description:
Level: Senior Consultant
As a Security Engineer, you will support the design, implementation, and optimization of ServiceNow Security Operations solutions, with a focus on Vulnerability Response and related workflow automation. This role offers the opportunity to work with client stakeholders to improve vulnerability management processes, strengthen data quality, and drive scalable remediation outcomes across the enterprise.
Work you'll do
As a Security Engineer on the Cyber Strategy & Transformation team, you will be responsible for...
Designing and implementing ServiceNow Security Operations solutions, including data models, workflows, access controls, and application configurations
Configuring and administering ServiceNow Vulnerability Response and Configuration Compliance modules, including source onboarding, assignment rules, service-level agreements, notifications, and remediation tasks
Integrating ServiceNow with vulnerability scanners and other third-party tools, and validating data mapping, configuration item matching, schedules, and error handling
Building automation using Flow Designer, Integration Hub, and Representational State Transfer application programming interfaces to support routing, approvals, escalations, enrichment, and remediation verification
Partnering with client security, information technology, and operations stakeholders to run workshops, define requirements, create user stories, and align configurations to business risk and remediation processes
Developing dashboards, documentation, update sets, and role-based access controls, while providing technical guidance to junior team members
Qualifications
Required:
4-8 years of ServiceNow administration, development, or platform experience
3+ years of ServiceNow Security Operations or Vulnerability Response implementation experience
Experience implementing or operating ServiceNow Vulnerability Response
Experience with vulnerability management lifecycle processes, including scan, triage, prioritization, remediation, and verification
Experience with Configuration Management Database, asset data, configuration item matching, ownership, or criticality management
Experience developing ServiceNow JavaScript using GlideRecord, Business Rules, Script Includes, or User Interface Policies
Bachelor’s or master’s degree in information technology or a specified field
Preferred:
ServiceNow Certified System Administrator certification
ServiceNow Certified Application Developer certification
ServiceNow Vulnerability Response or Security Operations certification
Experience with Configuration Compliance, Threat Intelligence, Security Incident Response, Governance Risk and Compliance, or Integrated Risk Management modules
Experience with performance tuning or large-scale data ingestion in ServiceNow