ServiceNow SecOps Technical Consultant
Description:
Location – Remote
Visa – Any Visa
ServiceNow SecOps Technical Consultant JD:
• Mandatory requirement to have active CIS-SecOps Certification
Experience Required:
4–10 Years (Minimum 3+ of hands-on experience in ServiceNow Security Operations (SecOps) implementation and development.
Key Responsibilities:
• Design, develop, and implement ServiceNow Security Operations (SecOps) solutions based on business and security requirements.
• Configure and customize SecOps modules, including:
o Security Incident Response (SIR)
o Vulnerability Response (VR)
o Threat Intelligence
o Configuration Compliance
o Security Posture Control (SPC)
• Develop and maintain:
o Business Rules
o Client Scripts
o UI Policies
o Script Includes
o Flow Designer / Workflow configurations
o Notifications and Security Workflows
• Configure and automate security incident lifecycle management.
• Implement vulnerability management processes, remediation workflows, and exception management.
• Integrate ServiceNow SecOps with security tools such as:
• Microsoft Defender, Sentinel, CrowdStrike, Qualys, Tenable, Rapid7, Splunk, QRadar
• Develop REST/SOAP integrations and leverage IntegrationHub spokes.
• Collaborate with Cyber Security, SOC, GRC, Infrastructure, and Operations teams to implement security use cases.
• Support threat intelligence ingestion, enrichment, and correlation activities.
• Design security orchestration and automation workflows.
• Participate in security workshops, requirement gathering, and solution design discussions.
• Perform unit testing, SIT, UAT, deployment, and post-production support.
• Maintain technical documentation, knowledge articles, and solution design documents.
• Ensure compliance with ServiceNow best practices, security standards, and HCL delivery methodologies.
Required Skills & Qualifications:
• Strong hands-on development experience on the ServiceNow platform.
• Mandatory implementation experience in ServiceNow SecOps.
• Expertise in:
o Security Incident Response (SIR)
o Vulnerability Response (VR)
o Threat Intelligence
o Security Posture Control
• Strong knowledge of:
o JavaScript
o Glide APIs
o Business Rules
o Client Scripts
o Script Includes
o ACLs
o Flow Designer
o Integration Hub
• Experience integrating ServiceNow with enterprise security and SIEM tools.
• Strong understanding of:
o Cyber Security Operations
o Vulnerability Management
o Incident Response
o Threat Intelligence
o Security Compliance
• Knowledge of security frameworks and standards:
o NIST
o ISO 27001
o CIS Controls
o MITRE ATT&CK
o SOC Framework
• Experience with CMDB, Discovery, and Service Mapping concepts.
• Understanding of ServiceNow data model and platform architecture.
• Experience in troubleshooting, debugging, and performance optimization.
• Strong communication and stakeholder management skills.
• Ability to work directly with customers, security teams, and architects.
Preferred Experience:
• Experience implementing Security Incident Response and Vulnerability Response modules.
• Experience integrating:
o Microsoft Sentinel
o Defender XDR
o CrowdStrike
o Qualys
o Rapid7
o Tenable
o Splunk
o QRadar
• Experience in Security Orchestration, Automation, and Response (SOAR) use cases.
• Experience with CMDB, Discovery, Service Mapping, and asset context integration.
• Experience implementing risk-based vulnerability prioritization.
• Experience developing custom integrations and security workflows.
• Experience in Agile/Scrum delivery methodology.
• Experience working with global SOC and Cyber Security teams