Service now Vulnerability Response

Cloudxtreme; Hyderabad, Bengaluru; On-site; INR 1,200,000 - 2,200,000; Full time

Job summary

Deloitte is seeking a ServiceNow VR Developer to design, implement, and optimize the Vulnerability Response module from our Hyderabad office. The role requires hands-on development, strong scripting, and solid knowledge of CMDB and integrations with leading vulnerability scanners.

You will work with security, IT, and cross-functional teams to deliver risk-focused solutions in an Agile environment. On-site work in Hyderabad is required.

Qualifications

• Hands-on ServiceNow development, 3–5 years, with 2+ years in VR or SecOps.
• Strong JavaScript, GlideScript, HTML/CSS skills.
• Experience with REST/SOAP, MID Servers and CMDB/Discovery.

Responsibilities

• Design, develop, configure, and maintain the ServiceNow VR module, including workflows, forms, notifications, and automation.
• Integrations between ServiceNow and third-party scanners (Qualys, Tenable, Rapid7).
• Automate VR processes using Flow Designer, Orchestration, and scripting.
• Configure CMDB correlations between vulnerable items and CIs.
• Collaborate with security and IT teams to meet enterprise risk goals.
• Create and maintain technical documentation, integration specs, and SOPs.

Skills

ServiceNow VR

JavaScript

Analytical thinking

Communication

Agile

Education

ServiceNow CSA

ServiceNow CAD

CIS-VR

Tools

REST/SOAP integrations

MID Servers

CMDB/Discovery

Job description

Description:

Work from Deloitte Hyderabad office for 5 days for 9 hours. (no remote working allowed)

Responsibilities

Module Development & Customization: Design, develop, configure, and maintain the ServiceNow VR module, including workflows, forms, notifications, and automation.

Integrations: Implement and manage integrations between ServiceNow and third-party vulnerability scanners, such as Qualys, Tenable, and Rapid7, to ensure accurate ingestion of vulnerability data.

Automation: Automate VR processes for triage, prioritization, assignment, and remediation tracking using ServiceNow Flow Designer, Orchestration, and scripting.

CMDB and CI Correlation: Configure and maintain correlation rules between vulnerable items and Configuration Items (CIs) in the Configuration Management Database (CMDB).

Collaboration: Work with security teams, IT, and other stakeholders to gather requirements and deliver solutions that align with enterprise risk management goals.

Documentation: Create and maintain technical documentation, integration specifications, and standard operating procedures.

Required qualifications

Experience: 3 to 5 years of hands‑on experience in ServiceNow development, with at least 2 years focused on the Vulnerability Response (VR) and/or Security Operations (SecOps) modules.

Technical Skills

Strong proficiency in JavaScript, GlideScript, HTML, and CSS.

Hands‑on experience with REST/SOAP integrations and MID Servers.

Experience with ServiceNow's CMDB and Discovery module.

Knowledge of Flow Designer, Automated Test Framework (ATF), and Performance Analytics.

Domain Knowledge

Solid understanding of cybersecurity principles, the vulnerability lifecycle, and risk assessment.

Familiarity with CVSS (Common Vulnerability Scoring System) and NIST frameworks.

Certifications (Highly desirable)

ServiceNow Certified System Administrator (CSA).

ServiceNow Certified Application Developer (CAD).

ServiceNow Certified Implementation Specialist - Vulnerability Response (CIS‑VR).

Soft Skills

Excellent analytical, problem‑solving, and troubleshooting skills.

Strong communication and collaboration skills to work with cross-functional teams.

Ability to work independently and manage multiple tasks in a fast-paced, Agile environment