ServiceNow Security Operations (SecOps) Consultant/ArchitectLocation – North Carolina, US (Remote work is also fine, but the candidate must be able to go to the office when required)Security Operations Role OverviewThe ServiceNow Security Operations (SecOps) Consultant/Architect is responsible for designing, implementing, and optimizing security response workflows on the ServiceNow platform.
The role focuses on Security Incident Response (SIR), Vulnerability Response (VR), and Threat Intelligence, enabling organizations to detect, prioritize, and remediate security threats faster through automation and collaboration between Security and IT teams.ServiceNow SecOps acts as a system of action that bridges cybersecurity tools and IT remediation workflows.Key ResponsibilitiesDesign and implement ServiceNow Security Operations (SecOps) solutions using out-of-the-box best practices and optimize core SecOps capabilities: Security Incident Response (SIR) and Response (VR)ServiceNow with SIEM, SOAR, vulnerability scanners, and threat intelligence feeds to enable end-to-end security workflowsAlert triage, enrichment, prioritization, and remediation across security and IT teamsRisk-based prioritization by leveraging CMDB context and business impactSecurity dashboards, KPIs, and executive reporting for incident trends, vulnerability posture, and response effectivenessCollaboration with SOC, IT, Risk, and Compliance teams to align security operations with enterprise processesParticipation in pre-sales, solution workshops, and architecture discussions when requiredRequired Skills & ExperienceStrong hands-on experience with ServiceNow Security Operations (SecOps) understanding of: Security incident management and management lifecycleIntelligence and SOC operationsIntegrating ServiceNow with security tools (SIEM, scanners, identity platforms)ServiceNow configuration and scripting (Flow Designer, Business Rules, Script Includes, Reporting)Stakeholder engagement skills across Security, IT, and Risk teamsCertifications (Preferred)ServiceNow CSA (Certified System Administrator) – MustCIS – Security Incident Response (CIS-SIR)CIS – Vulnerability Response (CIS-VR)Security certifications (ITIL, CISSP, CISM – preferred)CTA / CMA