Grc Consultant

Role: ServiceNow SecOps Technical Consultant

Location: Remote, USA

Visa : Any Visa

Duration: 6+ Months

Job Description:

Mandatory requirement to have active CIS-SecOps Certification

Experience Required: 4 10 Years (Minimum 3+ of hands-on experience in ServiceNow Security Operations (SecOps) implementation and development.

Key Responsibilities:

• Design, develop, and implement ServiceNow Security Operations (SecOps) solutions based on business and security requirements.
• Configure and customize SecOps modules, including: Security Incident Response (SIR), Vulnerability Response (VR), Threat Intelligence, Configuration Compliance, Security Posture Control (SPC)
• Develop and maintain: Business Rules, Client Scripts, UI Policies, Script Includes, Flow Designer / Workflow configurations, Notifications and Security Workflows
• Configure and automate security incident lifecycle management.
• Implement vulnerability management processes, remediation workflows, and exception management.
• Integrate ServiceNow SecOps with security tools such as: Microsoft Defender, Sentinel, CrowdStrike, Qualys, Tenable, Rapid7, Splunk, QRadar
• Develop REST/SOAP integrations and leverage IntegrationHub spokes.
• Collaborate with Cyber Security, SOC, GRC, Infrastructure, and Operations teams to implement security use cases.
• Support threat intelligence ingestion, enrichment, and correlation activities.
• Design security orchestration and automation workflows.
• Participate in security workshops, requirement gathering, and solution design discussions.
• Perform unit testing, SIT, UAT, deployment, and post-production support.
• Maintain technical documentation, knowledge articles, and solution design documents.
• Ensure compliance with ServiceNow best practices, security standards, and HCL delivery methodologies.

Required Skills & Qualifications:

Strong hands-on development experience on the ServiceNow platform. Mandatory implementation experience in ServiceNow SecOps. Expertise in: Security Incident Response (SIR), Vulnerability Response (VR), Threat Intelligence, Security Posture Control

Strong knowledge of: JavaScript, Glide APIs, Business Rules, Client Scripts, Script Includes, ACLs, Flow Designer, Integration Hub

Experience integrating ServiceNow with enterprise security and SIEM tools.

Strong understanding of: Cyber Security Operations, Vulnerability Management, Incident Response, Threat Intelligence, Security Compliance

Knowledge of security frameworks and standards: NIST, ISO 27001, CIS Controls, MITRE ATT&CK, SOC Framework

Experience with CMDB, Discovery, and Service Mapping concepts.

Understanding of ServiceNow data model and platform architecture.

Experience in troubleshooting, debugging, and performance optimization.

Strong communication and stakeholder management skills.

Ability to work directly with customers, security teams, and architects.

Preferred Experience:

• Experience implementing Security Incident Response and Vulnerability Response modules.
• Experience integrating: Microsoft Sentinel, Defender XDR, CrowdStrike, Qualys, Rapid7, Tenable, Splunk, QRadar
• Experience in Security Orchestration, Automation, and Response (SOAR) use cases.
• Experience with CMDB, Discovery, Service Mapping, and asset context integration.
• Experience implementing risk-based vulnerability prioritization.
• Experience developing custom integrations and security workflows.
• Experience in Agile/Scrum delivery methodology.
• Experience working with global SOC and Cyber Security teams.

For applications and inquiries,