ServiceNow SecOps Sr. Developer
- Fixity Technologies
2 Days Ago
NA
Yearly
Phoenix-AZ
8-15 Years
Required Skills: SIR, VR, CMDB, ServiceNow integrations,SIEM, SOAR, EDR,Splunk, Rapid, REST
Job Description
ServiceNow SecOps Sr. Developer
Must Have Technical/Functional Skills
1. 8-10 years of hands-on development experience in ServiceNow platform.
1. 8-10 years of hands-on development experience in ServiceNow platform.
2. 3+ years of experience specifically in ServiceNow SecOps – Security Incident Response (SIR), Vulnerability Response (VR) and Threat Intelligence module implementation.
3. Configure and customize ServiceNow SecOps module from ground-up.
4. Design workflows, business rules, client scripts, and integrations supporting the SecOps lifecycle.
5. Integrate ServiceNow SecOps with SIEM, SOAR, EDR, vulnerability scanners, and threat intelligence platforms (e.g., Splunk, QRadar, Rapid7, Tenable, Defender, etc.).
6. Configure MID Servers, data sources, and API connections for data ingestion.
7. Develop automation for vulnerability assignment, remediation tracking, and exception management.
8. Create custom dashboards, reports, and Performance Analytics indicators for vulnerability KPIs and trends.
9. Strong understanding of ServiceNow CMDB, Discovery, and ITSM processes.
10. Experience integrating with vulnerability scanners (Qualys, Tenable, Rapid7, Prisma Cloud, etc.).
11. Experience integrating ServiceNow with SIEM/SOAR and security tools
12. Knowledge of JavaScript, Glide API, Flow Designer, and REST/SOAP integrations.
13. ServiceNow Certified System Administrator (CSA)
14. Certified Implementation Specialist – Security Incident Response (CIS-SIR)
Roles & Responsibilities
1. Configure and customize ServiceNow SecOps module – SIR, VR and TI.
2. Design workflows, business rules, client scripts, and integrations supporting the SecOps lifecycle.
3. Integrate ServiceNow SecOps with SIEM, SOAR, EDR, vulnerability scanners, and threat intelligence platforms (e.g., Splunk, QRadar, Rapid7, Tenable, Defender, etc.).
4. Enable bi‑directional integrations using REST/SOAP, MID Server, and IntegrationHub spokes.
5. Configure MID Servers, data sources, and API connections for data ingestion.
6. Develop automation for vulnerability assignment, remediation tracking, and exception management.
7. Create custom dashboards, reports, and Performance Analytics indicators for security and vulnerability KPIs and trends.
