Remote Vulnerability Management Engineer - ServiceNow

GuidePoint Security LLC; United States; Remote; USD 90,000 - 140,000; Full time

Benefits offered by this job

Remote workforce (US-based)

Job summary

GuidePoint Security LLC is seeking a Vulnerability Management Engineer - ServiceNow to design, build, and operate the ServiceNow Security Operations and VR capabilities powering clients' vulnerability programs.

The role emphasizes automation, scanner integrations (Qualys, Tenable, Rapid7, Defender, CrowdStrike), and risk-based remediation using CMDB/Discovery. Up to 10% travel may be required, with strong collaboration across security, infrastructure, and application teams.

Qualifications

• Bachelor's degree in computer science, information systems, or related field.
• 1–2+ years of experience with ServiceNow Security Operations and CMDB integration.
• Hands-on experience configuring VR and Security Operations, including Flow Designer and workflows.

Responsibilities

• Design, configure, and support ServiceNow VR to manage end-to-end vulnerability lifecycle.
• Build remediation workflows, groups, rules, and calculators using Flow Designer and scripting.
• Configure risk scoring models using CVSS, threat intel, and asset criticality.
• Develop automation and workflows in Python/JavaScript to reduce manual triage.

Skills

Vulnerability mgmt

ServiceNow

Flow Designer

Python

JavaScript

Automation

Security Operations

Education

Bachelor's degree in CS/IS or related field

Tools

ServiceNow

Qualys

Tenable

Rapid7

CrowdStrike

Microsoft Defender

Flow Designer

Job description

GuidePoint Security LLC is seeking a Vulnerability Management Engineer - ServiceNow to design, build, and operate the ServiceNow Security Operations and VR capabilities powering clients' vulnerability programs.

The role emphasizes automation, scanner integrations (Qualys, Tenable, Rapid7, Defender, CrowdStrike), and risk-based remediation using CMDB/Discovery. Up to 10% travel may be required, with strong collaboration across security, infrastructure, and application teams.