PS, Solution Architect ( Armis/Veza)

ServiceNow; United States; Remote; USD 130,000 - 180,000; Full time

Job summary

ServiceNow ищет опытного эксперта по управлению уязвимостями и Threat Intelligence для глобальных клиентов. Вы будете руководить интеграцией жизненного цикла уязвимостей — от обнаружения до remediation, приоритизации и оперативной отчетности.

Ключевые навыки: автоматизация пайплайнов, сценарии на Python/PowerShell, работа с RBVM, облачными средами и данными разведки. Вы будете наставлять коллег и взаимодействовать с Product Security, Threat Intelligence и инженерами.

Qualifications

• 6–10+ лет опыта в управлении уязвимостями, разведке угроз или инженерии обнаружения.
• Глубокие знания CVSS, CWE/CVE, NVD, KEV, EPSS, опыт работы с платформами VMDR/Tenable/Qualys/Rapid7/Wiz/Prisma Cloud.

Responsibilities

• Руководить жизненным циклом уязвимостей и процессов обнаружения, приоритизации, устранения и отчетности.
• Автоматизировать пайплайны оценки риска и формирование отчетности для заказчиков.
• Сопровождать взаимодействие с командами безопасности, инженерии продукта и клиентского успеха для соблюдения SLA.
• Разрабатывать и поддерживать модели приоритизации рисков и дашборды для руководства.

Skills

Vulnerability Management

Threat Intelligence

Security Detection Engineering

Automation scripting

Python

PowerShell

REST APIs

JSON

RBVM

Cloud security

Data storytelling

Education

Bachelor’s or Master’s degree in Information Security or CS

Tools

Tenable

Qualys

Rapid7

Wiz

Prisma Cloud

ServiceNow VR

Centrix

NVD/KEV/EPSS

Job description

Описание:

It all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could do that for everyone—freeing people from busywork so they could focus on meaningful work. Today, ServiceNow is the AI control tower for business reinvention. Our ServiceNow AI platform brings together any AI, any data, and any workflow— helping 85% of the Fortune 500® work smarter, faster, and better. We're building an AI-native culture where technology and talent are unstoppable together. And we're just getting started. Join us to put AI to work for people.

Задачи:

We are expanding our Vulnerability Intelligence, Prioritization & Detection Response (VIPR/VMDR) capability to elevate Armis’ cyber defense posture globally. This role will lead the integration of vulnerability discovery, detection, intelligence enrichment, prioritization, and coordinated response into a unified, high-impact customer program across EMEA. Own the end-to-end vulnerability and detection lifecycle — from discovery, triage, and prioritization through remediation and reporting. Lead the Vulnerability Intelligence, Prioritization & Detection Response (VIPR/VMDR) function, integrating threat intel, exploit data, and asset context to drive data-backed decisions. Correlate internal vulnerability telemetry with external feeds (NVD, CISA KEV, EPSS, Mandiant, Shodan, VulnDB, Centrix for Early Warning) to assess exploitability and exposure. Operate and tune vulnerability and detection tools (e.g., Tenable, Qualys, Rapid7, Wiz, Prisma Cloud, ServiceNow VR) across hybrid customer environments. Automate vulnerability scoring, detection correlation, and reporting pipelines using Python, PowerShell, REST APIs, or automation rules within AMS/VIPR. Partner with Customer Success, Security Engineering, and Cloud Infrastructure teams to track remediation SLAs, exposure metrics, and MTTR improvements. Build and publish risk dashboards, customer-facing reports, and executive briefings using Splunk, Power BI, Elastic, or AMS/VIPR. Develop and maintain the Armis Vulnerability Prioritization Model (VPM) — aligning exploit intelligence, CVSS/EPSS scoring, Armis Proprietary Risk Scoring, and business criticality to guide customer risk posture. Support penetration test remediation, red team findings, and customer security audits. Author weekly vulnerability intelligence reports, zero-day summaries, and leadership briefings for APJ/APAC stakeholders. Collaborate with Product Security and Threat Intelligence teams to integrate vulnerability and detection data into Armis platform insights. Deliver training sessions and enablement workshops for customers, engineers, and analysts on vulnerability trends, tools, and operational best practices.

Требования:

6–10+ years of experience in Vulnerability Management, Threat Intelligence, or Security Detection Engineering. Deep expertise in CVSS, CWE/CVE, NVD, KEV, and exploit prediction (EPSS) frameworks. Hands-on experience with vulnerability and detection management platforms (Tenable, Qualys, Rapid7, Wiz, Prisma Cloud, ServiceNow VR, Centrix for VMDR). Proven ability to develop automation scripts and data pipelines (Python, PowerShell, Bash, REST APIs, JSON). Familiarity with risk-based vulnerability management (RBVM) and prioritization scoring models. Strong understanding of cloud-native security, container scanning, and hybrid infrastructure (AWS, Azure, GCP). Exceptional data storytelling skills — turning technical findings into actionable executive insights. Demonstrated ability to work independently and as part of a team. Exceptional communication skills across all levels of technical, middle management, and executive leadership personnel. Bachelor’s or Master’s degree in Information Security, Computer Science, or related discipline. Previous experience operating in a "Voice of the Customer" (VoC) technical role directly embedded with Product Engineering pods. A track record of mentoring senior technical staff (TCMs, TAMs, or Solutions Engineers) and developing scalable knowledge-sharing frameworks. Prior experience in enterprise SaaS, cybersecurity, or customer-facing technical programs. Familiarity with Armis Centrix™ or similar asset intelligence and exposure management tools. Certifications such as CISSP, GCCC, GCTI, CEH, or CySA+. Experience supporting compliance frameworks (SOC 2, ISO 27001, FedRAMP) in enterprise environments. Strong cross-cultural communication and collaboration skills across global and regional teams (APJ/APAC). Additional Information Work Personas We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service.

Условия:

The VIPR & VMDR Expert serves as an architect,, strategic analyst and technical operator — combining vulnerability lifecycle management with exploit intelligence, detection automation, and cross-functional coordination (ITSM). You’ll lead how Armis detects, prioritizes, and responds to vulnerabilities across customer environments, infrastructure, SaaS ecosystems, and the Armis platform — ensuring our customers stay ahead of emerging exploits, threats, and exposures.