ServiceNow Vulnerability Response (VR) Engineer

JOB ID:QT-SUL-08-427

Job Summary

We are looking for an experienced ServiceNow Vulnerability Response (VR) Engineer to implement, configure, and support ServiceNow Security Operations and Vulnerability Response solutions.

The candidate will be responsible for managing the end-to-end vulnerability lifecycle, remediation workflows, risk-based prioritization, security tool integrations, and operational support. Strong knowledge of ServiceNow SecOps, Vulnerability Response, CMDB, Discovery, Service Mapping, and asset management is required.

Key Responsibilities ServiceNow Vulnerability Response

• Configure and maintain the ServiceNow Vulnerability Response application.
• Develop and configure vulnerability remediation workflows.
• Configure vulnerability groups, assignment rules, and remediation processes.
• Configure and maintain vulnerability risk scoring models.
• Customize VR processes based on business and security requirements.
• Troubleshoot and resolve VR-related production issues.

Vulnerability Management

• Manage the end-to-end vulnerability lifecycle from identification through remediation and closure.
• Analyze and prioritize vulnerabilities based on CVSS, business risk, asset criticality, and service impact.
• Track remediation activities and ensure SLA compliance.
• Collaborate with security, infrastructure, and application teams on remediation.
• Support vulnerability reporting, risk analysis, and KPI tracking.

ITOM & Asset Context

• Leverage CMDB data to improve vulnerability prioritization and remediation.
• Validate CI relationships, dependencies, and asset information.
• Ensure vulnerability findings are accurately correlated with Configuration Items (CIs).
• Work with Discovery and CMDB teams to ensure discovered assets are properly mapped to vulnerabilities.
• Support business-service-aware vulnerability remediation.

ServiceNow ITOM

Strong functional understanding of:

• CMDB
• Discovery
• Service Mapping
• Configuration Management
• Event Management - preferred
• Asset and CI lifecycle management

Security Tool Integrations

Experience integrating ServiceNow Vulnerability Response with security and vulnerability management tools such as:

• Qualys
• Tenable
• Rapid7
• Microsoft Defender
• CrowdStrike

Operational Responsibilities

• Provide incident and production support for ServiceNow SecOps/VR.
• Perform root-cause analysis and troubleshoot integration or workflow issues.
• Identify opportunities for process automation and optimization.
• Prepare KPI, vulnerability, risk, and remediation reports.
• Support continuous improvement of vulnerability management processes.

Governance & Compliance

• Monitor vulnerability remediation SLAs.
• Support risk management and compliance reporting.
• Maintain process documentation and operational standards.
• Ensure vulnerability management processes align with enterprise security policies.

Mandatory Skills ServiceNow SecOps

• ServiceNow Vulnerability Response
• Security Operations
• Workflow Configuration
• Flow Designer

Security

• Vulnerability Management
• CVSS
• Risk Assessment
• Security Operations Processes
• Vulnerability Prioritization & Remediation

Integration

• Qualys
• Tenable
• Rapid7

Preferred Skills

• Security Incident Response (SIR)
• Threat Intelligence
• ServiceNow GRC
• ServiceNow ITOM
• CMDB
• Discovery
• Service Mapping
• Microsoft Defender / CrowdStrike integrations

Certifications

Mandatory:

• ServiceNow Certified System Administrator (CSA)

Preferred:

• CIS - Vulnerability Response
• CompTIA Security+
• ITIL Foundation

Candidate Profile

The ideal candidate should have strong hands-on experience with ServiceNow Vulnerability Response and SecOps, along with a solid understanding of vulnerability management, risk-based prioritization, security-tool integrations, and ITOM/CMDB concepts.

The candidate should be capable of independently configuring VR solutions, troubleshooting integrations, managing remediation workflows, and collaborating with security and infrastructure teams in an enterprise environment.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.