Vulnerability response - ServiceNow

TymblHub; Hyderabad; On-site; INR 600,000 - 1,000,000; Full time

Job summary

Deloitte Hyderabad is seeking a Vulnerability Analyst to join the onsite team for the VR module development and maintenance. You will design and customize workflows, forms, and automations within ServiceNow VR, and ensure seamless ingestion from Qualys, Tenable, and Rapid7 via REST/SOAP and MID servers.

The role requires strong ServiceNow expertise, CMDB/Discovery experience, and fluency with Flow Designer and ATF.

Qualifications

• 3–5 years of hands-on ServiceNow development, with VR/SecOps focus.
• Strong proficiency in JavaScript, GlideScript, HTML, and CSS.
• Experience with REST/SOAP integrations and MID Servers.

Responsibilities

• Design, develop, configure, and maintain the ServiceNow VR module including workflows, forms, notifications, and automation.
• Integrate ServiceNow VR with Qualys, Tenable, and Rapid7 for vulnerability data ingestion.
• Automate VR processes for triage, prioritization, assignment, and remediation tracking.

Skills

JavaScript

GlideScript

HTML

CSS

REST/SOAP

MID Server

ServiceNow CMDB

Discovery

Flow Designer

ATF

Performance Analytics

CVSS

NIST

Tools

ServiceNow VR

Job description

# Vulnerability response - ServiceNowCloudxtremeCPosted on October 4, 2026---Experience3 - 8 yrsJob LocationHyderabad, IndiaVacancy1DesignationVulnerability AnalystJob TypeONSITE---## Job Description**Role & responsibilities**Work from Deloitte Hyderabad office for 5 days for 9 hours. (no remote working allowed)ResponsibilitiesModule Development & Customization: Design, develop, configure, and maintain the ServiceNow VR module, including workflows, forms, notifications, and automation.Integrations: Implement and manage integrations between ServiceNow and third-party vulnerability scanners, such as Qualys, Tenable, and Rapid7, to ensure accurate ingestion of vulnerability data.Automation: Automate VR processes for triage, prioritization, assignment, and remediation tracking using ServiceNow Flow Designer, Orchestration, and scripting.CMDB and CI Correlation: Configure and maintain correlation rules between vulnerable items and Configuration Items (CIs) in the Configuration Management Database (CMDB).Collaboration: Work with security teams, IT, and other stakeholders to gather requirements and deliver solutions that align with enterprise risk management goals.Documentation: Create and maintain technical documentation, integration specifications, and standard operating procedures.Required qualificationsExperience: 3 to 5 years of hands-on experience in ServiceNow development, with at least 2 years focused on the Vulnerability Response (VR) and/or Security Operations (SecOps) modules.Technical Skills:Strong proficiency in JavaScript, GlideScript, HTML, and CSS.Hands-on experience with REST/SOAP integrations and MID Servers.Experience with ServiceNow's CMDB and Discovery module.Knowledge of Flow Designer, Automated Test Framework (ATF), and Performance Analytics.Domain Knowledge:Solid understanding of cybersecurity principles, the vulnerability lifecycle, and risk assessment.Familiarity with CVSS (Common Vulnerability Scoring System) and NIST frameworks.Certifications (Highly desirable):ServiceNow Certified System Administrator (CSA).ServiceNow Certified Application Developer (CAD).ServiceNow Certified Implementation Specialist - Vulnerability Response (CIS-VR).Soft Skills:Excellent analytical, problem-solving, and troubleshooting skills.Strong communication and collaboration skills to work with cross-functional teams.Ability to work independently and manage multiple tasks in a fast-paced, Agile environment