Vulnerability Management Engineer; ServiceNow; Mid-Atlantic region; Remote

Remote

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

General Description

We are looking for a Vulnerability Management Engineer
- Service Now to support GuidePoint Security's Mid-Atlantic Exposure Management practice by designing, building, and operating the Service Now Security Operations and Vulnerability Response (VR) capabilities that power our clients' vulnerability and exposure management programs. This role will engage in the development of automated vulnerability lifecycle workflows, security tool integrations, and risk-based remediation processes while providing “Wow Them” service to clients and/or internal customers or co-workers.

The Vulnerability Management Engineer
- Service Now will be required to demonstrate strong Service Now Security Operations engineering, scripting, and integration skills, lead by influence, and strong business/financial acumen to drive the use of progressive vulnerability response and exposure management programs that will align the delivery of business objectives and priorities.

About the Mid-Atlantic Exposure Management Practice

The Mid-Atlantic Exposure Management Practice is responsible for helping clients continuously identify, prioritize, and remediate the vulnerabilities and exposures that pose the greatest risk to their business. We design, implement, and operate the platforms and automation — with Service Now Security Operations at the center — that turn raw scanner output into governed, measurable, and business-aware remediation across the organization.

Our team of Service Now Security Operations engineers, vulnerability management specialists, and automation developers focuses on Vulnerability Response, Security Operations, and exposure management — using CMDB/ITOM asset context, risk-based prioritization, and Flow Designer automation. We partner with client security, infrastructure, and application teams to shrink remediation timelines, improve SLA adherence, and demonstrate real risk reduction.

Key focus areas of the practice:

• Building and tuning Service Now Vulnerability Response and Security Operations workflows
• Integrating scanners and threat intelligence (Qualys, Tenable, Rapid7, Defender, Crowd Strike) into a unified remediation pipeline
• Enabling risk-based, asset-aware prioritization using CMDB, Discovery, and Service Mapping

Roles and Responsibilities:

Service Now Vulnerability Response (VR) Engineering

• Design, configure, and support Service Now Vulnerability Response (VR) to manage the end-to-end vulnerability lifecycle — from ingestion and de-duplication through assignment, remediation, exception handling, and closure.
• Build and maintain remediation workflows, vulnerability groups, assignment rules, and calculators using Flow Designer, Business Rules, and other Service Now technologies.
• Configure risk scoring and prioritization models that combine CVSS, threat intelligence, exploitability, and business/asset criticality to drive risk-based remediation.

Service Now Security Operations

• Configure and maintain the Service Now Security Operations suite, including Vulnerability Response and, where in scope, Security Incident Response (SIR) and Configuration Compliance.
• Manage the vulnerability lifecycle end-to-end: intake, correlation, prioritization, remediation tracking,…