Lead Administrator (Tools & Automation)

Job Summary

The Senior Security Engineer – ServiceNow SecOps will serve as a technical leader responsible for designing, implementing, and optimizing ServiceNow Security Operations (SecOps) solutions. This role will work closely with Cyber Security, SOC, Vulnerability Management, IT Operations, and Infrastructure teams to automate and streamline security workflows across Vulnerability Response, Security Incident Response, Threat Intelligence, and Configuration Compliance modules. The ideal candidate will provide technical leadership and ensure delivery of scalable, secure, and compliant security operations solutions aligned with enterprise security objectives.

Key Responsibilities

Act as the ServiceNow SecOps Subject Matter Expert (SME) supporting Security Operations initiatives and security transformation programs.

Design and implement Security Incident Response (SIR), Vulnerability Response (VR), Threat Intelligence, and Configuration Compliance solutions.

Configure workflows, Business Rules, UI Policies, Flow Designer, and Integration Hub components.

Integrate ServiceNow with Microsoft Defender, CrowdStrike, Qualys, Tenable, Rapid7, Splunk, Sentinel, and similar tools.

Develop automated remediation workflows and orchestration capabilities.

Collaborate with SOC, Vulnerability Management, Threat Management, and Infrastructure teams.

Support vulnerability management lifecycle and remediation tracking.

Design dashboards, KPIs, and operational reporting.

Ensure CMDB alignment and data integrity.

Provide production support, troubleshooting, and root cause analysis.

Support upgrades, enhancements, and release management activities.

Ensure compliance with NIST, ISO 27001, SOC2, and CIS frameworks.

Mentor junior engineers and provide technical guidance.

Skill Requirements

Bachelor’s degree in computer science, Information Technology, Cyber Security, Engineering, or related discipline.

5+ years of overall ServiceNow platform experience.

4+ years of hands-on experience implementing ServiceNow Security Operations (SecOps).

Strong implementation experience in SIR, VR, Threat Intelligence, and Configuration Compliance.

Experience integrating ServiceNow with enterprise security tools and SIEM platforms.

Strong knowledge of vulnerability management and security incident management processes.

Experience with CMDB, Discovery, Service Mapping, and CSDM.

Proficiency in JavaScript, Glide API, Business Rules, Flow Designer, Integration Hub, REST/SOAP APIs.

Understanding of NIST, CIS Controls, ISO 27001, SOC2, and MITRE ATT&CK.

Experience in Agile, DevOps, and enterprise-scale environments.

Strong stakeholder management and communication skills.

Other Requirements

ServiceNow CSA

ServiceNow CAD

CIS - Security Incident Response

CIS - Vulnerability Response

CISSP, CISM, or Security+