ServiceNow SecOps Specialist

This is a fully remote position, open to applicants in India.

📋 Description

• Configure and oversee ServiceNow SecOps modules, with an emphasis on Security Incident Response (SIR), Vulnerability Response (VR), and Threat Intelligence integration.

• Design automated data ingestion pipelines through Integration Hub, facilitating connections between ServiceNow and external SIEMs, EDRs, and vulnerability scanners.

• Develop security orchestration and playbooks using Flow Designer to automate validation, containment activities, asset lookups, and owner assignments.

• Implement Vulnerability Assignment Rules and Calculator Groups to prioritize vulnerabilities based on asset criticality ratings and CVSS threat matrices.

• Establish data confidentiality measures through ACLs, read-permissions, and data isolation barriers.

• Manage Configuration Item (CI) reconciliation matches in collaboration with CMDB data stewards.

• Facilitate comprehensive user acceptance testing, create target test failure patterns, verify playbook workflows, and conduct analyst enablement training workshops.

⛳️ Requirements

• 4 to 8 years of foundational enterprise IT or cybersecurity experience.

• 3+ years specifically dedicated to designing, building, and maintaining configurations within the ServiceNow SecOps application suite.

• Strong technical expertise in JavaScript scripting, Flow Designer parameters, ServiceNow Glide API frameworks, JSON parsing structures, and REST/SOAP endpoint mappings.

• In-depth understanding of cybersecurity incident response phases (NIST/SANS), the MITRE ATT&CK framework, common infrastructure vulnerability vectors, and CMDB hierarchy frameworks.

• Required certification: ServiceNow Certified Implementation Specialist – Security Incident Response (CIS-SIR) or Vulnerability Response (CIS-VR).

• Preferred certifications: CompTIA Security+, CEH (Certified Ethical Hacker), or GCIH (GIAC Certified Incident Handler).

• Previous experience in implementing ServiceNow Major Security Incident Management (MSIM) frameworks or managing multi-tenant domain separation configurations.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Opportunities for professional development and certifications.

• Flexible work hours and remote work options.