The Security Incident Response (SIR) Developer role is responsible for designing, developing and implementing enhancements to the ServiceNow SIR module, to support cybersecurity incident response capability. The role focuses on building scalable and effective solutions, including workflows, integrations, automations and where appropriate, custom applications.
Working as part of the SIR POD, the developer collaborates with Global Cybersecurity Operations (GCO) teams, and platform teams, to deliver new functionality, resolve technical issues and continuously improve the platform in line with customer needed.
Responsibilities will include:
- Design, develop, and implement solutions within the ServiceNow Security Incident Response module
- Configure and customise workflows, playbooks, forms and automation using Flow Designer and scripting where appropriate
- Develop and maintain integrations between SIR and security tools such as SIEM, SOAR & EDR
- Troubleshoot and resolve defects, performance issues and technical problems
- Support platform upgrades, testing and release activities
- Work collaboratively within the SIR POD to deliver prioritised enhancements
- Ensure all development follows platform best practice
What you will bring to the role:
To be successful in this role you should have proven experience within the technology sector with the following skills:
- Expertise in developing and configuring solutions within ServiceNow SIR
- Solid scripting skills, including JavaScript and ServiceNow scripting frameworks
- Expertise in flow designer, integration hub and REST APIs
- Understanding of security incident response processes and lifecycles
- Experience configuring workflows, forms, access controls and notifications
- Strong troubleshooting and problem-solving skills
- Ability to work collaboratively within the SIR POD
- Self-motivated and possessing of a high sense of urgency and personal integrity
- A team-focused mentality with the proven ability to work effectively with diverse stakeholders