• Assist with operate, maintain, and optimize the ServiceNow Security Operations suite, including:
  
  
  • Security Incident Response (SIR)
  • Threat Intelligence
  • Vulnerability Response
  • Security Orchestration, Automation, and Response (SOAR)
• Collaborate with our Cyber Security Operations Center (SOC) analysts, Threat Intelligence teams, and Security Incident responders to streamline response workflows using security tooling, including Service Now SecOps.
• Develop and maintain integrations between ServiceNow SecOps and other security tools (e.g., SIEMs, threat intel platforms, vulnerability scanners, CMDBs).
• Design and implement playbooks and workflows to automate incident triage, response, and remediation actions.
• Analyze security events, identify trends, and recommend solutions to mitigate future threats.
• Ensure that incident handling procedures and escalation paths are documented and maintained in the platform.
• Provide technical leadership and mentoring to junior engineers and analysts.
• Stay current with evolving threat landscapes, security tooling and ServiceNow SecOps capabilities.

• Bachelor's degree in Computer Science, Information Security, or related field, or equivalent practical experience.
• 3 - 5+ years of experience in cybersecurity, with at least 2+ years of hands-on experience with ServiceNow Security Operations.
• Strong understanding of security incident response, vulnerability management, and threat intelligence processes.
• Experience building custom workflows, business rules, and integrations in ServiceNow using JavaScript, REST APIs, and MID Servers.
• Familiarity with security tools and technologies such as SIEMs (ArcSight, Sentinel, etc.), EDR, threat intelligence platforms, and vulnerability scanners (e.g., Rapid 7, Qualys, Tenable).
• Working knowledge of NIST, MITRE ATT&CK, and other security frameworks.
• Experience with SOAR playbook development is a strong plus.

• ServiceNow Certified Implementation Specialist - Security Incident Response or Vulnerability Response.
• Industry certifications such as CISSP, GCIA, GCIH, or Security+.
• Experience with the Microsoft Security stack, including Microsoft Defender, Microsoft Sentinel, and the broader Microsoft 365 and Azure ecosystems
• Experience in Operational Technology environments is a plus.
• Familiarity with DevSecOps, cloud security (AWS, Azure), or infrastructure-as-code is a bonus.

To apply please click on APPLY TO THIS POSITION