ServiceNow SecOps Architect

Job Title: Service Now Sec Ops Architect

Location: Remote with 2 weeks travel to Stamford, CT quarterly (nearby Candidate only)

Duration: Full Time

Work authorization: USC, GC, GC EAD

We’re seeking a highly experienced Service Now Architect with 12+ years of platform expertise to lead and support a large-scale project within the insurance industry. As a key technical leader, you will oversee the architectural integrity of the platform, driving digital transformation that aligns with enterprise-level goals and industry-specific compliance standards.

• Lead the end-to-end design and implementation of Service Now Security Operations (Sec Ops), ensuring platform configurations align with organizational security policies.
• Develop and optimize automated workflows, playbooks, and scripts to streamline the response lifecycle for security incidents and vulnerabilities.
• Architect and maintain robust integrations between Service Now and third-party security tools (scanners, SIEM, EDR) to centralize data ingestion.
• Ensure high-quality data correlation by aligning the CMDB with security discovery tools for improved asset visibility and risk prioritization.
• Build bespoke technical solutions using JavaScript and the Glide API to extend platform functionality beyond out-of-the-box features.
• Design custom dashboards and Performance Analytics to provide stakeholders with real-time visibility into security KPIs and remediation trends.
• Act as the primary subject matter expert, guiding global development teams and collaborating with stakeholders to deliver scalable security solutions.

• 12+ years of hands‑on development experience in Service Now platform.
• 5+ years of experience specifically in Security Incident Response (SIR) and Vulnerability Response (VR) implementation.
• Design, configure and customize Service Now SIR & VR module.
• Design and develop workflows, business rules, client scripts, and integrations supporting the SIR & VR lifecycle.
• Integrate VR with external vulnerability scanners and CMDB (Configuration Management Database) to automate import and correlation of vulnerability data.
• Configure MID Servers, data sources, and API connections for vulnerability data ingestion.
• Develop automation for vulnerability assignment, remediation tracking, and exception management.
• Create custom dashboards, reports, and Performance Analytics indicators for vulnerability KPIs and trends.
• Strong understanding of SOC operations & Incident response frameworks (NIST, SANS).
• Experience working with SIEM, SOAR, EDR, and vulnerability tools.
• Strong understanding of Service Now CMDB, Discovery, and ITSM processes.
• Experience integrating with vulnerability scanners (Qualys, Tenable, Rapid7, Prisma Cloud, etc.).
• Knowledge of JavaScript, Glide API, Flow Designer, and REST/SOAP integrations.
• Work with business stakeholders, technical stakeholders, onsite and offshore team to own the delivery of work.

Mindtris is committed to fostering workforce diversity and is proud to be an equal opportunity employer.