ServiceNow Vulnerability Response Engineer
Openkyber
Role: Vulnerability Management Specialist
Location : Springfield, VA ( Springfield, Virginia: Minimum three (3) days per week in office, mandatory.
Duration: 12 months
Interview Process/# of Rounds: Targeting 1 round, but might go into 2
Additional Notes: Why the role is open: Standing up an internial AI practice.
Job Title: Contractor, Vulnerability Management
Reporting Relationship: Reports to the Practice Lead, Vulnerability Management
PRIMARY DUTIES
Strategy & Planning Support the execution and continuous improvement of the enterprise Vulnerability Management Program. Assist in developing vulnerability management standards, procedures, metrics, and reporting processes. Work with cybersecurity architecture and engineering teams to identify systemic security gaps and recommend remediation strategies. Provide subject matter expertise to project teams throughout project lifecycles to ensure security vulnerabilities are appropriately addressed. Participate in risk discussions and provide recommendations regarding remediation prioritization and compensating controls.
Acquisition & Deployment Support deployment, configuration, and optimization of vulnerability management and security assessment technologies. Assist with onboarding new environments, applications, and cloud services into the vulnerability management program. Support implementation and operation of Breach and Attack Simulation (BAS) capabilities to validate security controls and identify opportunities for improvement. Collaborate with cloud, infrastructure, and application teams to improve security posture and vulnerability visibility.
Operational Management Conduct vulnerability assessments across infrastructure, cloud, and application environments. Analyze, validate, and prioritize vulnerabilities based on risk, exploitability, business impact, and threat intelligence. Coordinate remediation activities with project teams, technical teams, managed service providers, and third-party vendors. Track remediation progress and escalate high-risk issues as required. Facilitate vulnerability review meetings and drive accountability for remediation commitments. Utilize ServiceNow to manage workflows, remediation tracking, exception management, and reporting activities. Generate operational and executive reporting that communicates vulnerability trends, risk exposure, remediation performance, and program effectiveness. Support audits, assessments, penetration tests, and regulatory reviews related to cyber security controls. Collaborate with Cyber Operations, Cyber Risk Management, Architecture, Infrastructure, and Application Delivery teams to ensure vulnerabilities are addressed in a manner that balances security, operational reliability, and project delivery objectives. Assist in validating remediation efforts and confirming closure of identified vulnerabilities. Support continuous improvement initiatives aimed at reducing organizational risk and improving security posture.
QUALIFICATIONS, SKILLS & ABILITIES
Technical Attributes
Required Experience 7+ years of cyber security, vulnerability management, or security operations experience. Demonstrated experience managing enterprise vulnerability remediation programs. Hands-on experience with Qualys Vulnerability Management. Experience with Breach and Attack Simulation (BAS) technologies. Experience with Microsoft security technologies, including: Microsoft Defender, Microsoft Cloud Security Posture Management (CSPM), Azure, Azure DevOps (ADO). Experience with ServiceNow workflow management and reporting. Experience supporting cloud security and vulnerability management initiatives. Experience working within large enterprise environments with diverse technology ecosystems. Strong understanding of vulnerability prioritization methodologies and risk-based remediation approaches. Knowledge of cybersecurity frameworks and industry best practices, including NIST.
Preferred Experience Experience supporting utility, critical infrastructure, energy, or industrial organizations. Experience leveraging threat intelligence to prioritize remediation activities. Experience supporting security assessments, penetration testing, and audit remediation programs. Familiarity with security operations, incident response, and defensive security technologies.
Personal Attributes Strong relationship-building and stakeholder engagement skills. Ability to work collaboratively with business, technical, and third-party teams. Capable of influencing and driving remediation activities without direct authority. Strong analytical and problem-solving abilities. Excellent verbal, written, and presentation skills. Ability to communicate technical security issues in business-friendly language. Strong organizational skills with the ability to manage multiple priorities simultaneously. Highly self-motivated with strong attention to detail. Team-oriented and committed to supporting enterprise objectives while maintaining security requirements.
EDUCATION Bachelor's degree in Computer Science, Information Technology, Cyber Security, Engineering, or a related field preferred. Equivalent combination of education and relevant professional experience will be considered.
WORK EXPERIENCE Minimum 7 years of experience in Cyber Security, Vulnerability Management, Security Operations, Infrastructure Security, or a related discipline. Demonstrated experience working with project delivery teams and enterprise technology stakeholders. Experience producing executive-level metrics, dashboards, and program reporting.
CERTIFICATIONS (Preferred) One or more of the following: CISSP, GIAC Vulnerability Management (if held), GIAC Security Essentials (GSEC), GIAC Continuous Monitoring Certification (GMON), Certified Information Security Manager (CISM), Microsoft Security Certifications, Microsoft Azure Security Engineer Associate (AZ-500), Qualys Certified Specialist certifications
Location : Springfield, VA ( Springfield, Virginia: Minimum three (3) days per week in office, mandatory.
Duration: 12 months
Interview Process/# of Rounds: Targeting 1 round, but might go into 2
Additional Notes: Why the role is open: Standing up an internial AI practice.
Job Title: Contractor, Vulnerability Management
Reporting Relationship: Reports to the Practice Lead, Vulnerability Management
PRIMARY DUTIES
Strategy & Planning Support the execution and continuous improvement of the enterprise Vulnerability Management Program. Assist in developing vulnerability management standards, procedures, metrics, and reporting processes. Work with cybersecurity architecture and engineering teams to identify systemic security gaps and recommend remediation strategies. Provide subject matter expertise to project teams throughout project lifecycles to ensure security vulnerabilities are appropriately addressed. Participate in risk discussions and provide recommendations regarding remediation prioritization and compensating controls.
Acquisition & Deployment Support deployment, configuration, and optimization of vulnerability management and security assessment technologies. Assist with onboarding new environments, applications, and cloud services into the vulnerability management program. Support implementation and operation of Breach and Attack Simulation (BAS) capabilities to validate security controls and identify opportunities for improvement. Collaborate with cloud, infrastructure, and application teams to improve security posture and vulnerability visibility.
Operational Management Conduct vulnerability assessments across infrastructure, cloud, and application environments. Analyze, validate, and prioritize vulnerabilities based on risk, exploitability, business impact, and threat intelligence. Coordinate remediation activities with project teams, technical teams, managed service providers, and third-party vendors. Track remediation progress and escalate high-risk issues as required. Facilitate vulnerability review meetings and drive accountability for remediation commitments. Utilize ServiceNow to manage workflows, remediation tracking, exception management, and reporting activities. Generate operational and executive reporting that communicates vulnerability trends, risk exposure, remediation performance, and program effectiveness. Support audits, assessments, penetration tests, and regulatory reviews related to cyber security controls. Collaborate with Cyber Operations, Cyber Risk Management, Architecture, Infrastructure, and Application Delivery teams to ensure vulnerabilities are addressed in a manner that balances security, operational reliability, and project delivery objectives. Assist in validating remediation efforts and confirming closure of identified vulnerabilities. Support continuous improvement initiatives aimed at reducing organizational risk and improving security posture.
QUALIFICATIONS, SKILLS & ABILITIES
Technical Attributes
Required Experience 7+ years of cyber security, vulnerability management, or security operations experience. Demonstrated experience managing enterprise vulnerability remediation programs. Hands-on experience with Qualys Vulnerability Management. Experience with Breach and Attack Simulation (BAS) technologies. Experience with Microsoft security technologies, including: Microsoft Defender, Microsoft Cloud Security Posture Management (CSPM), Azure, Azure DevOps (ADO). Experience with ServiceNow workflow management and reporting. Experience supporting cloud security and vulnerability management initiatives. Experience working within large enterprise environments with diverse technology ecosystems. Strong understanding of vulnerability prioritization methodologies and risk-based remediation approaches. Knowledge of cybersecurity frameworks and industry best practices, including NIST.
Preferred Experience Experience supporting utility, critical infrastructure, energy, or industrial organizations. Experience leveraging threat intelligence to prioritize remediation activities. Experience supporting security assessments, penetration testing, and audit remediation programs. Familiarity with security operations, incident response, and defensive security technologies.
Personal Attributes Strong relationship-building and stakeholder engagement skills. Ability to work collaboratively with business, technical, and third-party teams. Capable of influencing and driving remediation activities without direct authority. Strong analytical and problem-solving abilities. Excellent verbal, written, and presentation skills. Ability to communicate technical security issues in business-friendly language. Strong organizational skills with the ability to manage multiple priorities simultaneously. Highly self-motivated with strong attention to detail. Team-oriented and committed to supporting enterprise objectives while maintaining security requirements.
EDUCATION Bachelor's degree in Computer Science, Information Technology, Cyber Security, Engineering, or a related field preferred. Equivalent combination of education and relevant professional experience will be considered.
WORK EXPERIENCE Minimum 7 years of experience in Cyber Security, Vulnerability Management, Security Operations, Infrastructure Security, or a related discipline. Demonstrated experience working with project delivery teams and enterprise technology stakeholders. Experience producing executive-level metrics, dashboards, and program reporting.
CERTIFICATIONS (Preferred) One or more of the following: CISSP, GIAC Vulnerability Management (if held), GIAC Security Essentials (GSEC), GIAC Continuous Monitoring Certification (GMON), Certified Information Security Manager (CISM), Microsoft Security Certifications, Microsoft Azure Security Engineer Associate (AZ-500), Qualys Certified Specialist certifications
For applications and inquiries, contact:View email address on us.fitly.work
Vacancy posted 1 day ago
Similar jobs that could be interesting for youBased on the ServiceNow Vulnerability Response Engineer in Remote vacancy
- ...Job Title : Vulnerability Engineer Location - Remote FTE Only Job Description... ...Server administrations. Roles & Responsibilities • Responsible for identifying,... ...Teams channels and ITSM platforms (ServiceNow) to streamline collaboration and track...ServicenowRemote work
AceStack LLC
United States2 days ago - ...DescriptionThe Role: As a Senior Cybersecurity Vulnerability Engineer, you will serve as a highly capable individual contributor responsible for designing, implementing, and... ...workflow tooling such as Qualys, Tenable, Wiz, ServiceNow or comparable platforms.Strong...ServicenowFull timeInterim roleLocal areaImmediate startWork from homeRelocation package
- ...Role: Vulnerability Management Specialist Location : Springfield... ...architecture and engineering teams to identify systemic security... ...remediation commitments. Utilize ServiceNow to manage workflows,... ...security operations, incident response, and defensive security technologies...ServicenowFor contractorsWork experience placementWork at office3 days per week
Openkyber
Remote3 days ago - Job Description Peraton is seeking a Senior Vulnerability Engineer to lead enterprise vulnerability management, exposure management, compliance... ...Integrate Tenable solutions with CyberArk, Splunk, ServiceNow, AWS, and other enterprise platforms -Support remediation...ServicenowRemote job
- ...Technology / Cybersecurity Engineer Zermount is seeking a senior... ...decisions. Responsibilities include architecture reviews... ...NIST RMF/CSF, FISMA, FedRAMP, vulnerability management, cloud compliance... ...Tenable, Splunk, Sentinel, ServiceNow, Prisma Cloud, or similar tools...ServicenowFull timeRemote work
Zermount, Inc.
Remote13 hours ago - ...TECHNOLOGY / CYBERSECURITY ENGINEER MILITARY FRIENDLY & PREFERRED... ...SaaS/product assessments, vulnerability management, emerging... ...secure adoption. Duties & Responsibilities Security Architecture Review... ..., Defender, Prisma Cloud, ServiceNow, or similar platforms....ServicenowFull timeRemote work
Hiring Our Heroes
Remote13 hours ago $64 - $69 per hour
....00 USD Hourly - $69.00 USD Hourly Description: ServiceNow Certificate Management Engineer We are not accepting C2C or 1099 arrangements. Location... ...within the ServiceNow platform. This role will be responsible for designing, configuring, and enhancing ServiceNow...ServicenowHourly payContract workOpenkyber
Remote3 days ago$130.2k - $195.4k
...Automation & Integration Engineering (SecAIE) transforms cybersecurity... ...of common security data (vulnerabilities, incidents, identity,... ...reliable, and more measurable.Responsibilities:Own the infrastructure-as-... ...(Jira, PagerDuty, ServiceNow, etc.)Data engineering depth...ServicenowFull timeWork at officeRemote workHome officeFlexible hours- ...looking for a Darktrace Cybersecurity Engineer is responsible for the design, deployment,... ...including SIEM, SOAR, EDR/XDR, ticketing, vulnerability-management, threat-intelligence, identity... ..., Splunk, IBM QRadar, Elastic, ServiceNow, Microsoft Defender, Palo Alto Cortex...ServicenowFull timeWork at officeLocal areaRemote workWork from home
- ...Our client seeks a Security Engineer to help build and strengthen... ...threat correlation, and incident response capabilities throughout our... ...alerting Perform vulnerability triage and assignment Engage... ...), device/asset management, ServiceNow ~ Experience with...ServicenowWork at officeRemote work
Forward Progress Staffing
United States2 days ago $120k - $150k
...a significant impact. Key Responsibilities Lead the planning, execution... ...leadership to a team of 5-10 AD engineers: mentor juniors, conduct... ...extensions, security vulnerabilities (e.g., Kerberos, LDAP hardening... ...Requests, Changes in a tool like ServiceNow. Background in M&A...ServicenowFull timeContract workRemote workFlexible hoursRevel IT
Houston, TX5 days ago- ...environment by designing, engineering, implementing, assessing, and... ...across platforms such as ServiceNow IRM, logging platforms, IAM... ...Partner with platform, IAM, vulnerability management, cloud security,... ...Congestion and we embrace the responsibility to lead the change that...ServicenowFull timeLocal areaWork from homeRelocation package
$135k - $155k
...Zero Trust Identity and ICAM Engineer to own end-to-end access... ...(SASE) guidance. These responsibilities and strategies are currently... ...Workspace ONE (WS1), Qualys vulnerability management, and Cisco network... ...Experience with ServiceNow, Salesforce, or IT service...ServicenowFull timeRemote workWork from homeFlexible hours- ...Senior Windows Systems Engineer Location: San Antonio, TX... ...playing a key role in patching, vulnerability management, and system... ...San Antonio, TX. Roles & Responsibilities: Windows Server Management... ...Manage change tickets through ServiceNow, aligning with ITIL...ServicenowWork from homeFlexible hours
Select Minds LLC
Dallas, TX14 days ago $91k - $120k
...and valued every day.Cyber Operations Engineer IIIJob Summary:We are seeking a... ...robust solutions that streamline incident response, vulnerability management, and security monitoring.Key... ...in Palo Alto Cortex XSIAM and ServiceNow.· Proficiency in scripting and automation...ServicenowFull timeRemote workWork from homeFlexible hours$100k - $110k
...100% remote Cybersecurity Engineer (System Steward) to support... ...artifacts, assess system risks and vulnerabilities, and coordinate with system... ...the continental US. Responsibilities: Provide... ...Wireshark. ~ Experience with ServiceNow Continuous Authorization...ServicenowFull timeRemote work- ...hiring Senior Cybersecurity Engineer - Tenable One)- Must be... ...spans both traditional IT vulnerability management and OT/IoT security... ...security operations team. Key Responsibilities Architecture Design... ...systems: CMDB/ITSM (ServiceNow), SIEM, ticketing, identity...ServicenowContract workLocal areaRemote work
Calance US
Dallas, TX27 days ago - ...Business Process Engineer OpportunityPeopleTec is currently seeking... ...processes in support of a ServiceNow implementation.This... ...where appropriateDefine roles, responsibilities, ownership, governance, and... ...including security incidents, vulnerability response, and remediation...ServicenowLocal area
PeopleTec
Huntsville, AL3 days ago - ...Role: Associate Systems Engineer - Lab Systems & OT Security... ...Directory, endpoint security, vulnerability remediation, access controls... ...site teams. Key Responsibilities Support Active Directory... ...and demand intake through ServiceNow or equivalent ITSM...ServicenowRemote work
Purple Drive
San Diego, CA5 days ago $120k - $145k
...seeking an experienced Senior Systems Engineer to join our team. You will be responsible for managing and automating... ...policiesPerform patching, vulnerability remediation, and access controlMaintain... ...& OperationsExecute changes via ServiceNow (CAB, risk, rollback)Maintain...ServicenowFull timeWork at officeLocal areaRemote work$118k - $176k
...SummaryThe Senior Controls Engineer, Operational Technology Fleet... ...a regional technical leader responsible for advancing the security,... ...cybersecurity knowledge to lead Threat Vulnerability Management (TVM) execution... ..., configuration management, ServiceNow or comparable work-...ServicenowFull timeFor contractorsWork at officeLocal areaRemote work- ...your career, and the financial world.About The roleAs a Vulnerability Management Engineer, you will support the identification, assessment, prioritization... ...properly prioritize their scope, impact and necessary response actions.Conduct security reviews of our products and...Remote work
$89.01k - $142.19k
...the senior most technical member of incident response team for our global information security organizationAbout... ...improvement and remediation programs.Possess vulnerability assessment, exploitation techniques, malware reverse engineering, threat analysis, and security threat and...Full timeLocal areaWork from home$117.6k - $161.7k
...Atlanta, Nashville)The Senior Digital Forensics and Incident Response Engineer provides forensics technical expertise and investigations... ...Engineer actively assesses and correlates incident data to enable vulnerability identification and provide forensic analysis...Full timeTemporary workFor contractorsApprenticeshipWork at officeRemote workWork from homeRelocationHome office$75k - $125k
...Cyber Security Group (CSG) is looking for an experienced and skilled individual to join the Vulnerability Operations (VO) team. Nelnet’s Vulnerability Operations team is responsible for managing the attack surface and collaboration with various business units to assess...Full timeContract workTemporary workWork experience placementWork at officeLocal areaRemote work3 days per week$119.32k - $202.85k
...actively recruiting for an experienced Senior Threat Detection & Response Engineer to support the research and development of new cyber... ...contribute to the knowledge of how cyber-attacks work, how vulnerabilities are exploited, and the way hostile cyber actors operate. Utilize...Full timeContract workWork experience placementWork at officeRemote work$100.63k - $167.79k
...sponsorship.Job Overview:LPL Financial is in search of a Senior Vulnerability Management Engineer who can execute and mature the existing Vulnerability... ...are effectively managed throughout the environment. Responsibilities:Perform as a vulnerability management SME in one or...Full timeWork from home$86.8k - $198k
...management tools, cloud platforms, vulnerability scanners, CMDBs, identity... ...in the full systems engineering lifecycle, including requirements... ...or administering Axonius, ServiceNow CMDB, Tanium, CrowdStrike,... ...we are committed to the responsible and ethical use of AI tools...ServicenowFull timeContract workPart timeWork at officeLocal areaRemote work$175k - $195k
Windows Systems Engineer (MTS) Location: Hybrid - Pleasanton... ...services customers. Key Responsibilities Administer Windows Servers... ...coverage, and remediate vulnerability scan findings against agreed... ...Jira Service Management, or ServiceNow Hybrid identity...ServicenowPermanent employmentFull timeWork at officeNight shiftSTN Incorporated
Pleasanton, CA7 days ago- ...Seeking a proactive and skilled full-time M365 Engineer to work remotely, responsible for managing governance across Microsoft 365 Copilot, Power Platform... ...deployment and ticket-based access management Ability to support ServiceNow catalogue design and approval workflows...ServicenowFull timeRemote work
Virtual Vocations Inc
United States2 days ago
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to ServiceNow Vulnerability Response Engineer. Be the first to apply!
Related searches