Vulnerability Management Engineer (ServiceNow)

Responsibilities

• Design, configure, and support ServiceNow Vulnerability Response and Security Operations capabilities across the vulnerability lifecycle.
• Build workflows, vulnerability groups, assignment rules, calculators, dashboards, KPIs, and SLA monitoring using ServiceNow technologies.
• Integrate vulnerability scanners, security tools, threat intelligence, and asset data through APIs and normalize findings in ServiceNow.
• Use CVSS, exploitability, threat intelligence, business criticality, CMDB, Discovery, and Service Mapping to drive risk-based remediation.
• Develop automation and reporting with JavaScript, HTML/CSS, Python, Flow Designer, and Business Rules.
• Coordinate remediation with client infrastructure, security, and application teams and provide operational support, incident support, governance, and documentation.
• Support exposure management initiatives, integration troubleshooting, root cause investigations, and continuous process optimization.

Requirements

• A bachelor's degree in computer science, information systems, or a related field is preferred.
• At least 1-2+ years of experience with ServiceNow Security Operations, CMDB implementation, and integration.
• Hands-on experience configuring ServiceNow Vulnerability Response, Security Operations, Flow Designer, and workflows.
• Experience integrating Qualys, Tenable, Rapid7, Microsoft Defender, or CrowdStrike with ServiceNow through APIs.
• Working knowledge of vulnerability management, CVSS, risk assessment, exploitability, SLA-driven remediation, and ITOM concepts.
• Strong programming skills in Python, JavaScript, HTML/CSS, and other ServiceNow technologies.
• Preferred experience includes exposure management or RBVM, threat intelligence enrichment, Security Incident Response workflows, and ServiceNow dashboards, KPI, SLA, and compliance reporting.
• ServiceNow certifications such as Certified System Administrator, Certified Application Developer, Certified Application Specialist, or relevant Certified Implementation Specialist certifications are preferred.
• Strong analytical, problem-solving, communication, documentation, and collaboration skills.

Benefits

• Remote workforce primarily; the role is U.S.-based only and may require up to 10% travel or on-site work for certain federal positions.
• Medical insurance options include a zero-deductible PPO or a high-deductible health plan with HSA contributions.
• Dental insurance is available, with GuidePoint paying stated portions of employee and family premiums.
• Twelve corporate holidays and a Flexible Time Off program.
• Mobile phone and home internet allowance.
• Retirement plan eligibility after two months at open enrollment.
• Pet benefit option.