ServiceNow Technical Lead

Must Have Technical/Functional Skills


1. 8-14 years of hands-on development experience in ServiceNow platform.


2. 3+ years of experience specifically in SecOps (SIR, VR) & IRM/GRC module implementation.


3. Configure and customize ServiceNow Vulnerability Response (VR) module to manage vulnerability identification, prioritization, remediation, and reporting.


4. Build and configure ServiceNow IRM applications such as Policy and Compliance, Risk Management, Audit, and Vendor Risk.


5. Strong understanding of IRM/GRC processes (policy lifecycle, control testing, risk assessments, audit workflows, vendor risk assessments).


6. Hands-on experience with ServiceNow Studio, Flow Designer, IntegrationHub, and Scoped Applications.


7. Configure MID Servers, data sources, and API connections.


8. Create custom dashboards, reports, and Performance Analytics indicators for vulnerability KPIs and trends.


9. Strong understanding of ServiceNow CMDB, Discovery, and ITSM processes.


10. Experience integrating with vulnerability scanners (Qualys, Tenable, Rapid7, Prisma Cloud, etc.).


11. Knowledge of JavaScript, Glide API, Flow Designer, and REST/SOAP integrations.


12. Knowledge in other ServiceNow modules in addition to above is highly desired.


13. ServiceNow Certified System Administrator (CSA).

Roles & Responsibilities


1. Configure and customize ServiceNow SecOps (SIR, VR) module to manage security incidents, vulnerability identification, prioritization, remediation, and reporting.


2. Build and configure ServiceNow IRM applications such as Policy and Compliance, Risk Management, Audit, and Vendor Risk.


3. Develop workflows, business rules, client scripts, UI policies, and Flow Designer flows to support IRM as well as SecOps processes.


4. Configure MID Servers, data sources, API connections and integrate third-party tools/applications.


5. Work closely with architects and business analysts to translate requirements into technical solutions.


6. Create custom dashboards, reports, and Performance Analytics indicators for vulnerability KPIs and trends.