Vulnerability response - ServiceNow

Role & responsibilities

Work from Deloitte Hyderabad office for 5 days for 9 hours. (no remote working allowed)

Responsibilities

Module Development & Customization: Design, develop, configure, and maintain the ServiceNow VR module, including workflows, forms, notifications, and automation.

Integrations: Implement and manage integrations between ServiceNow and third-party vulnerability scanners, such as Qualys, Tenable, and Rapid7, to ensure accurate ingestion of vulnerability data.

Automation: Automate VR processes for triage, prioritization, assignment, and remediation tracking using ServiceNow Flow Designer, Orchestration, and scripting.

CMDB and CI Correlation: Configure and maintain correlation rules between vulnerable items and Configuration Items (CIs) in the Configuration Management Database (CMDB).

Collaboration: Work with security teams, IT, and other stakeholders to gather requirements and deliver solutions that align with enterprise risk management goals.

Documentation: Create and maintain technical documentation, integration specifications, and standard operating procedures.

Required qualifications

Experience: 3 to 5 years of hands-on experience in ServiceNow development, with at least 2 years focused on the Vulnerability Response (VR) and/or Security Operations (SecOps) modules.

Technical Skills:

Strong proficiency in JavaScript, GlideScript, HTML, and CSS.

Hands-on experience with REST/SOAP integrations and MID Servers.

Experience with ServiceNow's CMDB and Discovery module.

Knowledge of Flow Designer, Automated Test Framework (ATF), and Performance Analytics.

Domain Knowledge:

Solid understanding of cybersecurity principles, the vulnerability lifecycle, and risk assessment.

Familiarity with CVSS (Common Vulnerability Scoring System) and NIST frameworks.

Certifications (Highly desirable):

ServiceNow Certified System Administrator (CSA).

ServiceNow Certified Application Developer (CAD).

ServiceNow Certified Implementation Specialist - Vulnerability Response (CIS-VR).

Soft Skills:

Excellent analytical, problem-solving, and troubleshooting skills.

Strong communication and collaboration skills to work with cross-functional teams.

Ability to work independently and manage multiple tasks in a fast-paced, Agile environment