TechRisk - ServiceNow - SecOps

Cyber TechRisk - ServiceNow - SecOps – Vulnerability
Response — Consultant/Senior Consultant

We are seeking an
experienced ServiceNow Developer with strong hands -on expertise in the
Vulnerability Response (VR) module. The ideal candidate will have 3+ years of
ServiceNow platform development experience, including at least 2 years focused
specifically on implementing and managing Vulnerability Response solutions. This
role will be responsible for configuring, customizing, integrating, and
automating the ServiceNow VR lifecycle to support vulnerability identification,
prioritization, remediation, and reporting.

Work you will
do

As a Consultant/Senior Consultant, you would be expected to perform the
following activities:

·       Well versed with the application deployment
and configuration baselines, and understanding of how the application
environment operates in a secure environment and how exceptions are handled
during operations.

·       Facilitate use of technology -based tools or
methodologies to continuously improve the monitoring, management, and
reliability of the service.

·       Define the architecture and design elements
for the implementation of ServiceNow SecOps solution (including design data/object models, technical workflow diagrams, access
control models, etc.).

·       Understand the business requirement and
define & document epics, user stories, create UI mock -ups and having a
roll -up the sleeves approach to make things happen.

·       Facilitate service now training and support
team on complex system configuration

·       You will collaborate with our clients to
resolve their business problems by translating functional requirements into
technical solutions.

·       You will be responsible for end -to -end
application design, workflow configurations, and customizations.

·       Must demonstrate good judgment and
pragmatic approach to delivering a solution that optimizes architecture
activities across company needs, business constraints, and technological
realities.

Key
Responsibilities (Vulnerability Response)

• Configure and administer ServiceNow
  Vulnerability Response: sources, vulnerability items, state model,
  assignment, SLAs, notifications, and remediation tasking.
  
• Integrate and maintain ingestion from
  vulnerability scanners/tools to ServiceNow VR application (e.g., Qualys,
  Tenable, Rapid7) and validate data mapping, schedules, and error handling.
  
• Drive normalization and data
  quality: CI/asset matching to ServiceNow CMDB, deduplication rules,
  exception handling, lifecycle management, and backlog hygiene.
  
• Build automations with Flow
  Designer/Integration Hub for routing, enrichment,
  reminders/escalations, and remediation verification/closure.
  
• Partner with IT Ops/app owners to
  coordinate workflow alignments in ServiceNow for patching/remediation,
  manage dependencies, and resolve ownership gaps.
  
• Define and publish dashboards/KPIs
  (e.g., vuln aging, SLA compliance, remediation throughput, critical
  exposure by service/BU) in ServiceNow.
  
• Support governance: audit -ready
  evidence, change/release management, documentation/runbooks, and
  role -based access controls.
  

Optional
Responsibilities (Security Incident Response)

• Support SIR intake/triage workflows
  and create linked tasks from high -risk vulnerability situations (e.g.,
  exploited CVEs) when needed.
  

Required
Qualifications

• 3 -10 years of ServiceNow experience
  (Admin/Developer/Platform).
  
• Hands -on experience implementing or
  operating ServiceNow Vulnerability Response.
  
• Strong understanding of vulnerability
  management lifecycle (scan → triage → prioritize → remediate →
  verify/close).
  
• Experience with CMDB/asset data
  concepts and how they affect VR accuracy (CI matching, ownership,
  criticality).
  
• Working knowledge of integrations
  (REST/API; MID Server where applicable) and automation (Flow Designer).
  

Preferred /
Nice to Have

• ServiceNow CSA (Mandatory), CAD and VR/SecOps -related CIS -certifications.
  
• Scripting (ServiceNow JavaScript),
  performance tuning, and large -scale data ingestion.
  

Core Skills

ServiceNow VR,
CMDB, Flow Designer/Integration Hub, integrations, reporting/dashboards,
vulnerability management, stakeholder coordination, good communication and
presentation.

Education: 

•        Bachelor’s/ Master’s
degree in information technology or related field