ServiceNow SecOps Technical Consultant - Remote ​/ Telecommute

Job Title

Pay Range: $57hr - $62hr

• Active CIS-Sec Ops Certification.
• 1+ years of hands-on experience in Service Now Security Operations (Sec Ops) implementation and development.
• Strong hands-on development experience on the Service Now platform.
• Mandatory implementation experience in Service Now Sec Ops.
• Expertise in Security Incident Response (SIR), Vulnerability Response (VR), Threat Intelligence, and Security Posture Control.
• Strong knowledge of JavaScript, Glide APIs, Business Rules, Client Scripts, Script Includes, ACLs, Flow Designer, and Integration Hub.
• Experience integrating Service Now with enterprise security and SIEM tools.
• Strong understanding of Cyber Security Operations, Vulnerability Management, Incident Response, Threat Intelligence, and Security Compliance.
• Knowledge of security frameworks and standards such as NIST, ISO 27001, CIS Controls, MITRE ATT&CK, and SOC Framework.
• Experience with CMDB, Discovery, and Service Mapping concepts.
• Understanding of Service Now data model and platform architecture.
• Experience in troubleshooting, debugging, and performance optimization.
• Strong communication and stakeholder management skills.
• Ability to communicate effectively with stakeholders.

• Design, develop, and implement Service Now Security Operations (Sec Ops) solutions based on business and security requirements.
• Configure and customize Sec Ops modules, including Security Incident Response (SIR), Vulnerability Response (VR), Threat Intelligence, Configuration Compliance, and Security Posture Control (SPC).
• Develop and maintain Business Rules, Client Scripts, UI Policies, Script Includes, Flow Designer / Workflow configurations, Notifications, and Security Workflows.
• Configure and automate security incident lifecycle management.
• Implement vulnerability management processes, remediation workflows, and exception management.
• Integrate Service Now Sec Ops with security tools such as Microsoft Defender, Sentinel, Crowd Strike, Qualys, Tenable, Rapid7, Splunk, and QRadar.
• Develop REST/SOAP integrations and leverage Integration Hub spokes.
• Collaborate with Cyber Security, SOC, GRC, Infrastructure, and Operations teams to implement security use cases.
• Support threat intelligence ingestion, enrichment, and correlation activities.
• Design security orchestration and automation workflows.
• Participate in security workshops, requirement gathering, and solution design discussions.
• Perform unit testing, SIT, UAT, deployment, and post-production support.
• Maintain technical documentation, knowledge articles, and solution design documents.
• Ensure compliance with Service Now best practices, security standards, and delivery methodologies.

• Experience implementing Security Incident Response and Vulnerability Response modules.
• Experience integrating Microsoft Sentinel, Defender XDR, Crowd Strike, Qualys, Rapid7, Tenable, Splunk, and QRadar.
• Experience in Security Orchestration, Automation, and Response (SOAR) use cases.
• Experience with CMDB, Discovery, Service Mapping, and asset context integration.
• Experience implementing risk-based vulnerability prioritization.
• Experience developing custom integrations and security workflows.
• Experience in Agile/Scrum delivery methodology.
• Experience working with global SOC and Cyber Security teams.