Job Summary
The Senior Security Engineer – ServiceNow SecOps will serve as a technical leader responsible for designing, implementing, and optimizing ServiceNow Security Operations (SecOps) solutions. This role will work closely with Cyber Security, SOC, Vulnerability Management, IT Operations, and Infrastructure teams to automate and streamline security workflows across Vulnerability Response, Security Incident Response, Threat Intelligence, and Configuration Compliance modules. The ideal candidate will provide technical leadership and ensure delivery of scalable, secure, and compliant security operations solutions aligned with enterprise security objectives.
Key Responsibilities
Act as the ServiceNow SecOps Subject Matter Expert (SME) supporting Security Operations initiatives and security transformation programs.
Design and implement Security Incident Response (SIR), Vulnerability Response (VR), Threat Intelligence, and Configuration Compliance solutions.
Configure workflows, Business Rules, UI Policies, Flow Designer, and Integration Hub components.
Integrate ServiceNow with Microsoft Defender, CrowdStrike, Qualys, Tenable, Rapid7, Splunk, Sentinel, and similar tools.
Develop automated remediation workflows and orchestration capabilities.
Collaborate with SOC, Vulnerability Management, Threat Management, and Infrastructure teams.
Support vulnerability management lifecycle and remediation tracking.
Design dashboards, KPIs, and operational reporting.
Ensure CMDB alignment and data integrity.
Provide production support, troubleshooting, and root cause analysis.
Support upgrades, enhancements, and release management activities.
Ensure compliance with NIST, ISO 27001, SOC2, and CIS frameworks.
Mentor junior engineers and provide technical guidance.
Skill Requirements
Bachelor’s degree in computer science, Information Technology, Cyber Security, Engineering, or related discipline.
5+ years of overall ServiceNow platform experience.
4+ years of hands-on experience implementing ServiceNow Security Operations (SecOps).
Strong implementation experience in SIR, VR, Threat Intelligence, and Configuration Compliance.
Experience integrating ServiceNow with enterprise security tools and SIEM platforms.
Strong knowledge of vulnerability management and security incident management processes.
Experience with CMDB, Discovery, Service Mapping, and CSDM.
Proficiency in JavaScript, Glide API, Business Rules, Flow Designer, Integration Hub, REST/SOAP APIs.
Understanding of NIST, CIS Controls, ISO 27001, SOC2, and MITRE ATT&CK.
Experience in Agile, DevOps, and enterprise-scale environments.
Strong stakeholder management and communication skills.
Other Requirements
ServiceNow CSA
ServiceNow CAD
CIS - Security Incident Response
CIS - Vulnerability Response
CISSP, CISM, or Security+