Cyber TechRisk - ServiceNow - SecOps – Vulnerability Response

Thinkwires; Kolkata District; On-site; INR 2,000,000 - 2,500,000; Full time

Job summary

Deloitte’s Cyber Risk Services invites a Consultant/Senior Consultant to join our Mumbai/ Bengaluru delivery teams. You will deploy ServiceNow Vulnerability Response, integrate scanners, and design workflows to improve security operations. The role emphasizes architecture, data quality, and collaboration with IT and client teams to deliver secure, reliable services.

Date posted May 23, 2026; Exp 3-10 years; Location includes Bengaluru, Hyderabad, Pune, Mumbai, Chennai, Kolkata, Delhi.

Qualifications

• 3-10 years of ServiceNow experience (Admin/Developer/Platform).
• Hands-on experience implementing or operating ServiceNow Vulnerability Response.
• Strong understanding of vulnerability management lifecycle (scan → triage → prioritize → remediate → verify/close).
• Experience with CMDB/asset data concepts and how they affect VR accuracy (CI matching, ownership, criticality).
• Working knowledge of integrations (REST/API; MID Server where applicable) and automation (Flow Designer).

Responsibilities

• Configure and administer ServiceNow Vulnerability Response: sources, vulnerability items, state model, assignment, SLAs, notifications, and remediation tasking.
• Integrate and maintain ingestion from vulnerability scanners/tools to ServiceNow VR application (e.g., Qualys, Tenable, Rapid7) and validate data mapping, schedules, and error handling.
• Drive normalization and data quality: CI/asset matching to ServiceNow CMDB, deduplication rules, exception handling, lifecycle management, and backlog hygiene.
• Build automations with Flow Designer/Integration Hub for routing, enrichment, reminders/escalations, and remediation verification/closure.
• Partner with IT Ops/app owners to coordinate workflow alignments in ServiceNow for patching/remediation, manage dependencies, and resolve ownership gaps.
• Define and publish dashboards/KPIs (e.g., vuln aging, SLA compliance, remediation throughput, critical exposure by service/BU) in ServiceNow.
• Support governance: audit-ready evidence, change/release management, documentation/runbooks, and role-based access controls.

Skills

ServiceNow

Vulnerability Response

Automation

Flow Designer

REST API

MID Server

Tools

Flow Designer

Integration Hub

REST API

MID Server

Job description

contract Bengaluru,Hyderabad, Pune , Mumbai,chennai, Kolkata,Delhi 20-25 LPA

Job Description

Deloitte’s Cyber Risk Services help our clients to be secure, vigilant, and resilient in the face of an ever-increasing array of cyber threats and vulnerabilities. Our Cyber Risk practice helps organizations with the management of information and technology risks by delivering end-end solutions using proven methodologies and tools in a consistent manner. Our services help organizations to address, in a timely manner, pervasive issues, such as identity theft, data security breaches, data leakage, cyber security, and system outages across organizations of various sizes and industries with the goal of enabling ongoing, secure, and reliable operations across the enterprise.

Work you will do

As a Consultant/Senior Consultant, you would be expected to perform the following activities:

• Well versed with the application deployment and configuration baselines, and understanding of how the application environment operates in a secure environment and how exceptions are handled during operations.
• Facilitate use of technology-based tools or methodologies to continuously improve the monitoring, management, and reliability of the service.
• Define the architecture and design elements for the implementation of ServiceNow SecOps solution (including design data/object models, technical workflow diagrams, access control models, etc.).
• Understand the business requirement and define & document epics, user stories, create UI mock-ups and having a roll-up the sleeves approach to make things happen.
• Facilitate service now training and support team on complex system configuration
• You will collaborate with our clients to resolve their business problems by translating functional requirements into technical solutions.
• You will be responsible for end-to-end application design, workflow configurations, and customizations.
• Must demonstrate good judgment and pragmatic approach to delivering a solution that optimizes architecture activities across company needs, business constraints, and technological realities.

Requirements & Skills

Key Responsibilities (Vulnerability Response)

• Configure and administer ServiceNow Vulnerability Response: sources, vulnerability items, state model, assignment, SLAs, notifications, and remediation tasking.
• Integrate and maintain ingestion from vulnerability scanners/tools to ServiceNow VR application (e.g., Qualys, Tenable, Rapid7) and validate data mapping, schedules, and error handling.
• Drive normalization and data quality: CI/asset matching to ServiceNow CMDB, deduplication rules, exception handling, lifecycle management, and backlog hygiene.
• Build automations with Flow Designer/Integration Hub for routing, enrichment, reminders/escalations, and remediation verification/closure.
• Partner with IT Ops/app owners to coordinate workflow alignments in ServiceNow for patching/remediation, manage dependencies, and resolve ownership gaps.
• Define and publish dashboards/KPIs (e.g., vuln aging, SLA compliance, remediation throughput, critical exposure by service/BU) in ServiceNow.
• Support governance: audit-ready evidence, change/release management, documentation/runbooks, and role-based access controls.

Optional Responsibilities (Security Incident Response)

• Support SIR intake/triage workflows and create linked tasks from high-risk vulnerability situations (e.g., exploited CVEs) when needed.

Required Qualifications

• 3-10 years of ServiceNow experience (Admin/Developer/Platform).
• Hands-on experience implementing or operating ServiceNow Vulnerability Response.
• Strong understanding of vulnerability management lifecycle (scan → triage → prioritize → remediate → verify/close).
• Experience with CMDB/asset data concepts and how they affect VR accuracy (CI matching, ownership, criticality).
• Working knowledge of integrations (REST/API; MID Server where applicable) and automation (Flow Designer).

Preferred / Nice To Have

• ServiceNow CSA (Mandatory), CAD and VR/SecOps-related CIS-certifications.
• Scripting (ServiceNow JavaScript), performance tuning, and large-scale data ingestion.

Job Overview

Date Posted: May 23, 2026

Expiration Date: May 15, 2026

Experience: 3-10

Job Location: Bengaluru,Hyderabad, Pune , Mumbai,chennai, Kolkata,Delhi

All Job Openings