Security Incident Handling & Vulnerability Management

AlmavivA de Belgique; Den Haag; Remote; EUR 60,000 - 80,000; Full time

Job summary

A leading IT security company is seeking an expert in Security Incident Handling and Vulnerability Management. The role requires at least 5 years of experience with ServiceNow Security Operations modules and the ability to configure automated remediation workflows. This position allows remote work from Europe. Only EU citizens are eligible.

Qualifications

• 5+ years of hands-on experience with ServiceNow Security Operations modules.
• Experience implementing automated remediation workflows through IntegrationHub.
• Understanding of ServiceNow CMDB and its role in security incident correlation.

Responsibilities

• Assess the existing ServiceNow SecOps implementation.
• Configure and optimize ServiceNow Security Incident and Vulnerability Response modules.
• Develop security incident handling and vulnerability response processes.
• Integrate external data sources such as vulnerability scanners.
• Design and implement performance metrics and reports.
• Provide documentation and governance recommendations.

Skills

ServiceNow Security Operations modules

Automated remediation workflows

Vulnerability management

Security incident handling

Job description

Security Incident Handling & Vulnerability Management

Responsibilities

• Assess the existing ServiceNow SecOps implementation and its integration within the broader ITSM environment.
• Configure and optimize the ServiceNow Security Incident Response (SIR) and Vulnerability Response (VR) modules to enable automated triage, prioritization, and remediation workflows.
• Develop and formalize security incident handling and vulnerability response processes in alignment with recognized industry standards (e.g., NIST 800-61, ISO/IEC 27035, CIS Controls).
• Integrate external data sources such as vulnerability scanners (e.g., Qualys, Tenable), threat intelligence platforms, and SIEM systems (e.g., Splunk).
• Design and implement performance metrics, dashboards, and reports to monitor Service Level Objectives (SLOs), Mean Time to Respond (MTTR), and remediation compliance.
• Provide documentation, governance recommendations, and knowledge transfer to ensure sustainable operational capability.

Requirements

• A minimum of 5 years of proven hands‑on experience with ServiceNow Security Operations modules, specifically SIR and VR.
• A minimum of 5 years of experience implementing automated remediation workflows through IntegrationHub, Flow Designer, or custom scripting.
• Understanding of ServiceNow CMDB and its role in correlation of vulnerabilities and security incidents.

Certification

Mandatory: ServiceNow System Administrator and/or ServiceNow Security Operations Certified Implementation Specialist

Additional Information

Level: Expert

Delivery mode: Remote from Europe

Only EU Citizens

Location

The Hague, South Holland, Netherlands