Overview In this role you will design, develop, and implement ServiceNow SecOps solutions to detect, respond, and remediate security threats for a U.S. Government customer. You will collaborate with security stakeholders to translate mission needs into scalable SecOps capabilities within the ServiceNow platform. The position combines development, integration engineering, and process consulting to modernize security operations. You will drive dashboards, playbooks, and automated workflows that improve incident response and threat management.
Responsibilities- Design, prototype, and implement ServiceNow SecOps applications (SIR, VR, CC, TI)
- Build and maintain integrations with SIEM, vulnerability scanners, and threat intel tools
- Develop orchestration playbooks, Flow Designer workflows, and API-based integrations
- Create and sustain dashboards and KPIs for real-time security posture
- Lead workshops with SOC/IR/VR teams to capture needs and translate to technical solutions
- Support incident resolution, troubleshooting, and sustainment of the SecOps environment
- Provide mentorship and knowledge transfer on best practices and sustainment of solutions
- Document policies, procedures, and designs aligned with Agile and secure coding standards
Key requirements- 8+ years in software development, IT security, or IT systems engineering
- Minimum 4+ years of ServiceNow experience with at least 2+ years in SecOps applications
- Strong ServiceNow administration, configuration, and custom app development
- Experience integrating ServiceNow with SIEM, scanners, and threat intel platforms
- Hands-on with Flow Designer, Orchestration, IntegrationHub, and MID Server
- Web tech and integration skills (JavaScript, HTML, XML, Angular, CSS; REST, SOAP, LDAP, SSO)
- Familiarity with NIST 800-53, FedRAMP, CISA KEV, MITRE ATT&CK
- Strong communication and documentation skills
- U.S. Citizenship; ability to obtain DHS suitability and TS/SCI clearance
- Strong communication and presentation abilities
- Analytical and consulting mindset
- Collaborative stakeholder engagement
- ServiceNow SecOps (SIR, VR, CC, TI)
- IntegrationHub, Flow Designer, Orchestration, MID Server
- SIEM integrations (e.g., Splunk)
