We are seeking a highly skilled Senior ServiceNow Developer with extensive experience in Security Operations (SecOps) to join our team. This role involves designing, implementing, and supporting ServiceNow Security Operations modules while integrating with enterprise security tools and processes.
Roles and Responsibilities
- Implement and configure ServiceNow Security Operations (SecOps) modules, including Security Incident Response (SIR) and Threat Intelligence.
- Design, develop, and maintain integrations with leading security tools, such as:
- FlashPoint (Threat Intelligence)
- Palo Alto WildFire
- Netskope
- Have I Been Pwned (HIBP)
- Configure inbound/outbound REST integrations using MID Servers with secure authentication.
- Map, normalize, and manage security data including alerts, vulnerabilities, and Indicators of Compromise (IOCs) within ServiceNow.
- Develop and maintain security workflows, playbooks, business rules, scripts, and automation to streamline operations.
- Enable dashboards, KPIs, and reporting for both operational and executive stakeholders.
- Collaborate closely with SOC, GRC, Risk, and IT teams for requirements gathering, UAT, and production support.
- Ensure all implementations comply with enterprise security standards, best practices, and audit requirements.
Required Qualifications
- 8–12 years of hands-on experience with ServiceNow, with a focus on Security Operations.
- Proven experience implementing SIR, Threat Intelligence, and security integrations.
- Strong expertise in configuring REST APIs, MID Servers, and secure authentication mechanisms.
- Solid understanding of security workflows, incident response processes, and IT security operations.
- Excellent communication skills and ability to partner with cross-functional teams in a hybrid environment.
- Experience supporting enterprise security standards and audit compliance is a plus.