Cyber TechRisk - ServiceNow - SecOps – Vulnerability
Response — Consultant/Senior Consultant

We are seeking an
experienced ServiceNow Developer with robust hands -on expertise in the
Vulnerability Response (VR) module. The ideal candidate will have 3+ years of
ServiceNow platform development experience, including at least 2 years focused
specifically on implementing and managing Vulnerability Response solutions. This
role will be responsible for configuring, customizing, integrating, and
automating the ServiceNow VR lifecycle to support vulnerability identification,
prioritization, remediation, and reporting.

Work you will
do

As a Consultant/Senior Consultant, you would be expected to perform the
following activities:

· Well versed with the application deployment
and configuration baselines, and understanding of how the application
environment operates in a secure environment and how exceptions are handled
during operations.

· Facilitate use of technology -based tools or
methodologies to continuously improve the monitoring, management, and
reliability of the service.

· Define the architecture and design elements
for the implementation of ServiceNow SecOps solution (including design data/object models, technical workflow diagrams, access
control models, etc.).

· Understand the business requirement and
define & document epics, user stories, create UI mock -ups and having a
roll -up the sleeves approach to make things happen.

· Facilitate service now training and support
team on complex system configuration

· You will collaborate with our clients to
resolve their business problems by translating functional requirements into
technical solutions.

· You will be responsible for end -to -end
application design, workflow configurations, and customizations.

· Must demonstrate good judgment and
pragmatic approach to delivering a solution that optimizes architecture
activities across company needs, business constraints, and technological
realities.

Key
Responsibilities (Vulnerability Response)

- Configure and administer ServiceNow
Vulnerability Response: sources, vulnerability items, state model,
assignment, SLAs, notifications, and remediation tasking.

- Integrate and maintain ingestion from
vulnerability scanners/tools to ServiceNow VR application (e.g., Qualys,
Tenable, Rapid7) and validate data mapping, schedules, and error handling.

- Drive normalization and data
quality: CI/asset matching to ServiceNow CMDB, deduplication rules,
exception handling, lifecycle management, and backlog hygiene.

- Build automations with Flow
Designer/Integration Hub for routing, enrichment,
reminders/escalations, and remediation verification/closure.

- Partner with IT Ops/app owners to
coordinate workflow alignments in ServiceNow for patching/remediation,
manage dependencies, and resolve ownership gaps.

- Define and publish dashboards/KPIs




(e.g., vuln aging, SLA compliance, remediation throughput, critical
exposure by service/BU) in ServiceNow.

- Support governance: audit -ready
evidence, change/release management, documentation/runbooks, and
role -based access controls.


Optional
Responsibilities (Security Incident Response)

- Support SIR intake/triage workflows
and create linked tasks from high -risk vulnerability situations (e.g.,
exploited CVEs) when needed.


Required
Qualifications

- 3 -10 years of ServiceNow experience
(Admin/Developer/Platform).

- Hands -on experience implementing or
operating ServiceNow Vulnerability Response.

- Strong understanding of vulnerability
management lifecycle (scan → triage → prioritize → remediate →
verify/close).

- Experience with CMDB/asset data
concepts and how they affect VR accuracy (CI matching, ownership,
criticality).

- Working knowledge of integrations
(REST/API; MID Server where applicable) and automation (Flow Designer).


Preferred /
Nice to Have

- ServiceNow CSA (Mandatory), CAD and VR/SecOps -related CIS -certifications.

- Scripting (ServiceNow JavaScript),
performance tuning, and large -scale data ingestion.


Core Skills

ServiceNow VR,
CMDB, Flow Designer/Integration Hub, integrations, reporting/dashboards,
vulnerability management, stakeholder coordination, good communication and
presentation.

Education:

• Bachelor’s/ Master’s
degree in information technology or related field