ServiceNow SecOps Developer

ServiceNow SecOps Developer

We are seeking an experienced ServiceNow SecOps Developer with strong expertise in implementing, configuring, and supporting ServiceNow Security Operations solutions. The ideal candidate will have hands-on experience with Security Incident Response (SIR), Threat Intelligence, security tool integrations, workflow automation, and security operations reporting. This role requires close collaboration with Security Operations Center (SOC), Risk, GRC, and IT teams to deliver enterprise-grade security solutions.

Design, develop, implement, and support ServiceNow Security Operations (SecOps) solutions.

Configure and maintain Security Incident Response (SIR) and Threat Intelligence modules.

Develop and support integrations between ServiceNow and enterprise security tools.

Build inbound and outbound REST API integrations using MID Servers and secure authentication methods.

Integrate and manage security data feeds from tools such as FlashPoint, Palo Alto WildFire, Netskope, and Have I Been Pwned (HIBP).

Map, normalize, and manage security alerts, vulnerabilities, indicators of compromise (IOCs), and threat intelligence data within ServiceNow.

Develop workflows, playbooks, business rules, client scripts, script includes, and automation solutions.

Create dashboards, KPIs, executive reports, and operational security metrics.

Collaborate with SOC, Risk, Compliance, GRC, and IT stakeholders to gather requirements, perform UAT, and provide production support.

Troubleshoot and resolve application issues while ensuring platform stability and performance.

Ensure all implementations comply with enterprise security policies, audit requirements, and industry best practices.

7–10+ years of ServiceNow development experience.

Strong hands-on experience with ServiceNow Security Operations (SecOps).

Expertise in:

• Security Incident Response (SIR)
• Threat Intelligence
• REST API Integrations
• MID Servers
• Workflow Automation
• Business Rules and Scripting

Experience integrating security tools such as:

• FlashPoint
• Palo Alto WildFire
• Netskope
• Have I Been Pwned (HIBP)

Strong understanding of security operations processes, incident management, and threat intelligence workflows.

Excellent communication and stakeholder management skills.

ServiceNow Certified System Administrator (CSA)

ServiceNow Certified Application Developer (CAD)

ServiceNow Security Operations (SecOps) Specialization/Certification Preferred

Experience working with SOC, GRC, Risk, and Compliance teams.

Knowledge of vulnerability management and security operations best practices.

Experience supporting enterprise-scale ServiceNow implementations.

A hands-on ServiceNow SecOps Developer with proven experience implementing Security Incident Response and Threat Intelligence solutions, integrating enterprise security tools, automating security workflows, and delivering scalable security operations capabilities within large enterprise environments.