Role: ServiceNow SecOps Architect – SIR & Vulnerability Response
Phoenix, AZ – Onsite (4 Days per Week)
Contract Position 12 Month
14+ Years of Experience Required
Rate- $70/hr on c2c
GBaMS ReqID: Not Provided
W2 Preference // C2C Also Workable
All Visa Workable
Job Description:
We are seeking an experienced ServiceNow SecOps Architect with deep expertise in Security Incident Response (SIR), Vulnerability Response (VR), Configuration Management Database (CMDB), security integrations, and enterprise ServiceNow architecture. The ideal candidate will lead end-to-end SecOps solution design, implementation, governance, automation, and platform scalability.
Key Responsibilities:
- Lead end-to-end architecture for ServiceNow SIR and VR, including data models, scopes, modular design, governance, and platform performance.
- Design and configure prioritization models, Risk Scores, Service Level Agreements (SLAs), and remediation workflows.
- Build robust CMDB relationships linking vulnerabilities to assets, services, and business applications for service-aware remediation.
- Enable bi-directional integration between SIR and IT Service Management (ITSM).
- Integrate vulnerability scanners and threat intelligence feeds, including Qualys, Tenable, Rapid7, and Prisma Cloud.
- Optimize Vulnerability Item (VI) normalization, de-duplication, suppression, false-positive handling, and asset-vulnerability correlation.
- Design automation for vulnerability assignment, remediation tracking, risk acceptance, compensating controls, deferrals, and exception management.
- Configure MID Servers, data sources, APIs, and integrations for vulnerability data ingestion.
- Develop workflows, Business Rules, Client Scripts, Flow Designer solutions, and REST/SOAP integrations.
- Build executive and operational dashboards, reports, and Performance Analytics indicators for vulnerability Key Performance Indicators (KPIs), exposure, SLA breaches, and Mean Time to Remediate (MTTR).
- Establish Development (DEV), Test, and Production (PROD) strategies, Automated Test Framework (ATF) coverage, upgrade readiness, and platform governance.
Essential Skills:
- 12+ years of hands-on ServiceNow development experience.
- 5+ years implementing ServiceNow Security Incident Response (SIR) and Vulnerability Response (VR).
- Strong expertise in ServiceNow SecOps, CMDB, Discovery, and ITSM.
- Experience with SIEM, SOAR, Endpoint Detection and Response (EDR), and vulnerability management tools.
- Strong knowledge of NIST and SANS incident response frameworks.
- Expertise in JavaScript, Glide API, Flow Designer, REST, and SOAP.
Certifications:
- Mandatory: ServiceNow Certified Technical Architect (CTA).
- Mandatory: Certified Implementation Specialist – Security Incident Response (CIS-SIR).
Keywords: ServiceNow SecOps, SIR, VR, Vulnerability Response, Security Incident Response, CMDB, Discovery, ITSM, Qualys, Tenable, Rapid7, Prisma Cloud, SIEM, SOAR, EDR, MID Server, JavaScript, Glide API, Flow Designer, REST, SOAP, NIST, SANS, ATF, Performance Analytics, CTA, CIS-SIR.
