Vulnerability Management Engineer

Job Title: Vulnerability Management Engineer
Location: REMOTE
Experience: 15+ Years

Requirements :

• ServiceNow certifications: CSA (Certified System Administrator; CIS-VR (Vulnerability Response), or CIS-SecOps
• OT (Operational Technology) Discovery and OT VM Certifications
• OT Visibility (integration with Maximo, Qualys, Tenable, Forescout) to support OT Vulnerability Management and CMDB population

Job Description/ Responsibilities :

• Design and build bi-directional integrations between ServiceNow and Tanium, Maximo, Forescout, and Qualys using REST/SOAP APIs, MID Servers, IntegrationHub spokes, and custom scripted APIs.
• Ensure data integrity and synchronization for asset, configuration, and vulnerability data flowing between ServiceNow CMDB/CSDM and source systems.
• Manage integration error handling, retry logic, logging, and monitoring/alerting for all connected systems.
• Map and normalize data schemas across platforms: mapping Qualys QID, Forescout device classification, Tanium asset/patch data, Maximo asset/work order data.
• Automate vulnerability management lifecycle in ServiceNow: ingestion, asset/CI correlation, risk scoring, prioritization, assignment, remediation workflow, verification, closure.
• Build ServiceNow Flow Designer/Workflow automations for remediation tasks, approvals, exception/risk-acceptance, SLA escalations.
• Configure automated ticketing and work order creation in Maximo for OT asset remediation.
• Implement automated network segmentation/containment triggers leveraging Forescout for high-risk or unpatchable OT assets.
• Reconcile Tanium patch/configuration data with Qualys scan results to reduce false positives and validate remediation.
• Configure ServiceNow to document all lifecycle actions with timestamps, decision rationale, approvals, and remediation evidence to support audit, compliance, and regulatory reporting (IEC 62443, NIST 800-82).
• Build reporting dashboards and performance analytics using ServiceNow Performance Analytics.
• Maintain integration and workflow documentation and runbooks.
• Apply OT-specific remediation strategies when patching is not feasible.
• Partner with OT engineering and plant/site teams to ensure safety and production uninterrupted.
• Maintain unified IT/OT asset and vulnerability inventory within ServiceNow CMDB/CSDM.
• Collaborate with Security Operations, IT, OT Engineering, and Compliance teams for workflow requirements and risk acceptance criteria.
• Support change management and testing across dev/test/prod.
• Provide expertise on ServiceNow Vulnerability Response and OT Security module capabilities.

Required Qualifications

• 4+ years experience administering or engineering on the ServiceNow platform including Vulnerability Response, OT/IoT Security modules, Flow Designer, IntegrationHub, CMDB/CSDM data modeling.
• Experience building two-way integrations with Tanium, Qualys, Forescout, Maximo or comparable CMMS/EAM.
• Understanding vulnerability management lifecycle concepts including scanning, risk scoring, remediation SLAs, exception management.
• Knowledge of OT/ICS/SCADA environments.
• Experience with JavaScript, Glide API, Scripted REST APIs, Business Rules.
• Strong understanding of API authentication methods including OAuth2, mutual TLS, API keys.
• Excellent technical documentation skills.

For applications and inquiries,