Business Process Tech Consultant (ServiceNow)

Nightwing; Sterling (VA); On-site; USD 100,000 - 130,000; Full time

Job summary

A cybersecurity solutions provider is seeking a Business Process Tech Consultant (ServiceNow) to enhance security operations. This hybrid role necessitates over 4 years of ServiceNow experience, focusing on SecOps applications. Key responsibilities include designing SecOps solutions, developing integrations, and collaborating with security teams. Competitive benefits and a focus on professional growth are offered.

Qualifications

• U.S. Citizenship required; must be located on U.S. soil.
• 8+ years of software development, IT security, or IT systems engineering experience.
• Minimum 4+ years of ServiceNow experience, with at least 2+ years focused on SecOps applications.

Responsibilities

• Design and implement ServiceNow SecOps applications.
• Support the customer’s roadmap for Splunk integrations.
• Develop custom integrations with SIEM, scanner, and intel tools.

Skills

ServiceNow experience in SecOps

Software development

IT security

Integration technologies (REST, SOAP)

JavaScript, HTML, XML, Angular, CSS

Communication skills for stakeholders

Education

Bachelor’s degree in Cybersecurity, Computer Science, Software Engineering, Systems Engineering

Tools

ServiceNow

Splunk

IntegrationHub

Job description

Business Process Tech Consultant (ServiceNow)

Join to apply for the Business Process Tech Consultant (ServiceNow) role at Nightwing

Nightwing provides technically advanced full-spectrum cyber, data operations, systems integration and intelligence mission support services to meet our customers’ most demanding challenges. Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability research, ubiquitous technical surveillance, data intelligence, lifecycle mission enablement, and software modernization. Nightwing brings disruptive technologies, agility, and competitive offerings to customers in the intelligence community, defense, civil, and commercial markets.

Nightwing is supporting a U.S. Government customer on a large mission critical development and sustainment program to design, build, deliver, and operate a network operations environment including introducing new cyber capabilities to address emerging threats. Nightwing is seeking a ServiceNow SecOps Business Process / Technical Consultant to design, develop, and implement ServiceNow Security Operations (SecOps) solutions that enhance the customer’s ability to detect, respond, and remediate security threats.

This hybrid role combines ServiceNow SecOps development, integration engineering, and process consulting. The ideal candidate will work directly with security stakeholders, translate mission requirements into technical designs, and deliver scalable, secure, and automated SecOps capabilities within the ServiceNow platform.

Responsibilities Include

• Designing, prototyping, and implementing ServiceNow SecOps applications, including:
• Security Incident Response (SIR): enrichment, correlation rules, and automated playbooks.
• Vulnerability Response (VR): scanner integrations, remediation workflows, patch group automation.
• Configuration Compliance (CC): policy exception handling, remediation tasks, compliance dashboards.
• Threat Intelligence (TI): ingestion of IOCs, sightings search, enrichment workflows.
• Supporting the customer’s roadmap for Splunk integrations to enable alert ingestion, bi-directional incident synchronization, and SIEM dashboards.
• Developing custom integrations with SIEM, scanner, and intel tools (e.g., Splunk, Tenable, VirusTotal, Hybrid Analysis) using IntegrationHub, REST/SOAP APIs, and MID Server.
• Building and maintaining orchestration playbooks, Flow Designer workflows, Business Rules, and Script Includes to automate enrichment and response actions.
• Documenting and maintaining policies, procedures, and technical designs aligned with Agile development practices and secure coding standards.
• Leading workshops with SOC, IR, and VR teams to capture mission needs, define business requirements, and translate them into technical solutions.
• Creating and maintaining Performance Analytics dashboards and KPIs to provide real-time visibility into security posture.
• Supporting incident resolution, troubleshooting, and sustainment of the ServiceNow SecOps environment.
• Providing mentorship and knowledge transfer to client staff on best practices and solution sustainment.

Required Skills

• U.S. Citizenship required; must be located on U.S. soil.
• Must be able to obtain DHS program suitability and a TS/SCI clearance.
• 8+ years of software development, IT security, or IT systems engineering experience.
• Minimum 4+ years of ServiceNow experience, with at least 2+ years focused on SecOps applications (SIR, VR, CC, or TI).
• Strong knowledge of ServiceNow administration, advanced configuration, and custom application development.
• Experience integrating ServiceNow with SIEM, vulnerability scanners, and threat intelligence platforms.
• Hands-on experience with Flow Designer, Orchestration, IntegrationHub, and MID Server.
• Strong technical skills in web technologies (JavaScript, HTML, XML, Angular, CSS) and integration technologies (REST, SOAP, LDAP, SSO).
• Familiarity with federal cybersecurity frameworks (NIST 800-53, FedRAMP, CISA KEV, MITRE ATT&CK).
• Strong communication, presentation, and documentation skills for technical and business stakeholders.

Desired Skills

• Experience supporting DHS, DoD, or Intelligence Community customers.
• Experience deploying future-state SecOps processes including incident triage, vulnerability management, compliance automation, and threat intel workflows.
• Familiarity with Splunk use cases for security operations and event correlation.
• Experience with collaboration tools (MS Teams, Outlook, SharePoint, Atlassian Jira/Confluence).
• Strong problem-solving, analytical, and consulting skills in complex security environments.
• ISSEP or ISSAP certification desired.

Desired Certifications

• ServiceNow Certification (e.g., Certified System Administrator, Certified Application Developer, Certified Implementation Specialist – SecOps (SIR, VR, or CC)).
• ITIL v4 Foundation certification (or willingness to complete within one year).
• DoD 8570.1-M Compliance at IAT Level I (e.g., CISSP) certification highly desired.

Required Education

• Bachelor’s degree in Cybersecurity, Computer Science, Software Engineering, Systems Engineering, or a related discipline.
• In lieu of a degree: an additional 10 years of directly relevant work experience (total 18+ years) may be substituted.

Syndeo: 3484

Nightwing is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class.

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Information Technology