Job Description:

We are seeking a skilled and certified Technical Consultant with hands-on experience implementing ServiceNow Vulnerability Response (VR) and integrating external vulnerability scanning tools through the ServiceNow Store or custom integrations. The ideal candidate will be responsible for the end-to-end implementation, configuration, and optimization of vulnerability management integrations within the ServiceNow platform—ensuring seamless data flow, efficient remediation workflows, and compliance with security best practices.

Key Responsibilities:

• Lead the implementation and integration of vulnerability scanning solutions with ServiceNow VR.
• Configure and customize the Vulnerability Response and Application Vulnerability Response (AVR) modules to support automated ingestion, triage, and remediation workflows.
• Integrate vulnerability scan results via MID Server, APIs, or connectors, ensuring accurate and timely synchronization.
• Develop and maintain custom workflows, business rules, script includes, and UI policies to support business requirements.
• Collaborate with security, IT operations, and application teams to ensure proper mapping of vulnerabilities to Configuration Items (CIs).
• Provide technical guidance and best practices for vulnerability lifecycle management within ServiceNow.
• Conduct knowledge transfer sessions and prepare technical documentation for administrators and end users.
• Troubleshoot and resolve integration issues, ensuring reliability and optimal system performance.

Required Qualifications:

• CSA, CAD, CIS-VR Certification (mandatory).
• Proven experience implementing integrations between vulnerability scanning tools (e.g., Invicti, Qualys, Tenable, Rapid7) and ServiceNow VR.
• Strong understanding of ServiceNow Security Operations (SecOps), particularly VR and AVR modules.
• Proficiency in JavaScript, REST APIs, and ServiceNow scripting.
• Experience with MID Server configuration, data sources, and integration troubleshooting.
• Familiarity with CVE, CWE, and CVSS scoring systems.
• Excellent communication, documentation, and stakeholder collaboration skills.

Preferred Qualifications:

• Experience with multiple vulnerability management platforms (e.g., Invicti, Qualys, Tenable, Rapid7).
• ITIL Foundation Certification.
• Experience supporting federal, state, or other regulated environments.