Vulnerability response - ServiceNow

Cloudxtreme; Hyderabad, Chennai District, Bengaluru; On-site; INR 800,000 - 1,500,000; Full time

Job summary

Deloitte Hyderabad is seeking a ServiceNow VR Developer to work on-site in Hyderabad for 5 days a week, 9 hours daily. The role focuses on designing, developing, and maintaining the Vulnerability Response module, including workflows, forms and automation.

You will implement and manage integrations with third‑party scanners and automate VR processes using Flow Designer and scripting. Strong CMDB knowledge and collaboration with security teams are essential.

Qualifications

• 3–5 years of hands-on ServiceNow development experience.
• At least 2 years focused on Vulnerability Response (VR) and/or Security Operations (SecOps).
• Strong proficiency in JavaScript, GlideScript, HTML, and CSS.

Responsibilities

• Module Development & Customization: Design, develop, configure, and maintain the ServiceNow VR module, including workflows, forms, notifications, and automation.
• Integrations: Implement and manage integrations between ServiceNow and third-party vulnerability scanners (Qualys, Tenable, Rapid7).
• Automation: Automate VR processes for triage, prioritization, assignment, and remediation tracking using Flow Designer, Orchestration, and scripting.
• CMDB and CI Correlation: Configure and maintain correlation rules between vulnerable items and CIs in CMDB.
• Collaboration: Work with security teams, IT, and stakeholders to gather requirements and deliver enterprise risk solutions.
• Documentation: Create and maintain technical documentation and integration specs.

Skills

JavaScript

GlideScript

HTML

CSS

REST/SOAP

MID Servers

CMDB

Discovery

Flow Designer

ATF

Performance Analytics

Tools

ServiceNow

ATF

Job description

Role & responsibilities

Work from Deloitte Hyderabad office for 5 days for 9 hours. (no remote working allowed)

Responsibilities

• Module Development & Customization: Design, develop, configure, and maintain the ServiceNow VR module, including workflows, forms, notifications, and automation.
• Integrations: Implement and manage integrations between ServiceNow and third-party vulnerability scanners, such as Qualys, Tenable, and Rapid7, to ensure accurate ingestion of vulnerability data.
• Automation: Automate VR processes for triage, prioritization, assignment, and remediation tracking using ServiceNow Flow Designer, Orchestration, and scripting.
• CMDB and CI Correlation: Configure and maintain correlation rules between vulnerable items and Configuration Items (CIs) in the Configuration Management Database (CMDB).
• Collaboration: Work with security teams, IT, and other stakeholders to gather requirements and deliver solutions that align with enterprise risk management goals.
• Documentation: Create and maintain technical documentation, integration specifications, and standard operating procedures.

Required qualifications

Experience: 3 to 5 years of hands‑on experience in ServiceNow development, with at least 2 years focused on the Vulnerability Response (VR) and/or Security Operations (SecOps) modules.

Technical Skills

• Strong proficiency in JavaScript, GlideScript, HTML, and CSS.
• Hands‑on experience with REST/SOAP integrations and MID Servers.
• Experience with ServiceNow's CMDB and Discovery module.
• Knowledge of Flow Designer, Automated Test Framework (ATF), and Performance Analytics.

Domain Knowledge

• Solid understanding of cybersecurity principles, the vulnerability lifecycle, and risk assessment.
• Familiarity with CVSS (Common Vulnerability Scoring System) and NIST frameworks.

Certifications (Highly desirable)

• ServiceNow Certified System Administrator (CSA).
• ServiceNow Certified Application Developer (CAD).
• ServiceNow Certified Implementation Specialist - Vulnerability Response (CIS-VR).

Soft Skills

• Excellent analytical, problem-solving, and troubleshooting skills.
• Strong communication and collaboration skills to work with cross‑functional teams.
• Ability to work independently and manage multiple tasks in a fast‑paced, Agile environment.