ServiceNow Vulnerability Response Engineer

Role Description

The ServiceNow Vulnerability Response (VR) Engineer is responsible for designing, implementing, and optimizing the Bureau's Enterprise Vulnerability Management Program (VMP) through the ServiceNow Security Operations platform. This role supports the engineering and enhancement of the Vulnerability Response (VR) application, integrating vulnerability data sources, automating remediation workflows, and improving enterprise vulnerability reporting.

The ideal candidate possesses deep experience with ServiceNow Security Operations, particularly the Vulnerability Response (VR) module, and understands how vulnerability management integrates with Security Incident Response (SIR), Governance, Risk, and Compliance (GRC), Configuration Management Database (CMDB), and enterprise security operations. This individual will collaborate with cybersecurity, infrastructure, application, and business stakeholders to ensure vulnerabilities are prioritized, tracked, remediated, and reported effectively using risk-based methodologies and automation.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field.
• 5+ years of experience supporting enterprise Vulnerability Management Programs.
• Extensive hands-on experience with:
  • ServiceNow Security Operations
  • ServiceNow Vulnerability Response (VR)
  • ServiceNow Security Incident Response (SIR)
  • ServiceNow Governance, Risk, and Compliance (GRC)
• Experience integrating enterprise vulnerability scanners (such as Tenable, Qualys, Rapid7, or Microsoft Defender Vulnerability Management) with ServiceNow.
• Strong understanding of vulnerability lifecycle management, remediation workflows, and risk-based prioritization.
• Experience configuring ServiceNow workflows, dashboards, reporting, business rules, and automation.
• Knowledge of vulnerability scoring methodologies, including CVSS, exploitability metrics, and business impact analysis.
• Strong understanding of enterprise cybersecurity operations and vulnerability management best practices.
• Excellent analytical, troubleshooting, and communication skills.

Requirements

• ServiceNow Certified System Administrator (CSA)
• ServiceNow Certified Implementation Specialist – Vulnerability Response (CIS-VR)
• ServiceNow Certified Implementation Specialist – Security Incident Response (CIS-SIR)
• ServiceNow Certified Application Developer (CAD)
• CISSP (Certified Information Systems Security Professional)
• Experience supporting federal government cybersecurity programs.
• Familiarity with AI-enabled vulnerability prioritization and automated remediation capabilities.
• Experience integrating ServiceNow with enterprise CMDB, ITSM, and Security Operations platforms.

Benefits

• Competitive salary
• Employer-paid health insurance premiums (medical, dental, vision)
• Employer-paid short/long term disability insurance and basic life/AD&D insurance
• 401K with a 4% employer contribution
• Professional development reimbursement options available (training, certification, education, etc.)
• Flexible and remote work policies for most positions
• Paid Time Off (PTO) at a rate of three (3) weeks plus one (1) day per year of service up to four (4) weeks annually
• 11 paid holidays per calendar year