Job Title: ServiceNow SecOps Sr. Developer
Location: Phoenix, Az - 4 days hybrid
Employment Type: Full Time
Experience Required 10 Years
Must Have Technical/Functional Skills
• 8-10 years of hands-on development experience in ServiceNow platform.
• 3+ years of experience specifically in ServiceNow SecOps – Security Incident Response (SIR), Vulnerability Response (VR) and Threat Intelligence module implementation.
• Configure and customize ServiceNow SecOps module from ground-up.
• Design workflows, business rules, client scripts, and integrations supporting the SecOps lifecycle.
• Integrate ServiceNow SecOps with SIEM, SOAR, EDR, vulnerability scanners, and threat intelligence platforms (e.g., Splunk, QRadar, Rapid7, Tenable, Defender, etc.).
• Configure MID Servers, data sources, and API connections for data ingestion.
• Develop automation for vulnerability assignment, remediation tracking, and exception management.
• Create custom dashboards, reports, and Performance Analytics indicators for vulnerability KPIs and trends.
• Strong understanding of ServiceNow CMDB, Discovery, and ITSM processes.
• Experience integrating with vulnerability scanners (Qualys, Tenable, Rapid7, Prisma Cloud, etc.).
• Experience integrating ServiceNow with SIEM/SOAR and security tools
• Knowledge of JavaScript, Glide API, Flow Designer, and REST/SOAP integrations.
• ServiceNow Certified System Administrator (CSA)
• Certified Implementation Specialist – Security Incident Response (CIS-SIR)
Roles & Responsibilities
• Configure and customize ServiceNow SecOps module – SIR, VR and TI.
• Design workflows, business rules, client scripts, and integrations supporting the SecOps lifecycle.
• Integrate ServiceNow SecOps with SIEM, SOAR, EDR, vulnerability scanners, and threat intelligence platforms (e.g., Splunk, QRadar, Rapid7, Tenable, Defender, etc.).
• Enable bi directional integrations using REST/SOAP, MID Server, and IntegrationHub spokes.
• Configure MID Servers, data sources, and API connections for data ingestion.
• Develop automation for vulnerability assignment, remediation tracking, and exception management.
• Create custom dashboards, reports, and Performance Analytics indicators for security and vulnerability KPIs and trends.