SecDevOps / ServiceNow SME

Intellect Solutions LLC; Rockville (MD); On-site; USD 110,000 - 160,000; Full time

Job summary

Intellect Solutions LLC in Rockville, MD is seeking a SecDevOps / ServiceNow SME to maintain and enhance ServiceNow Vulnerability Response workflows, support integrations, and automate vulnerability-management tasks.

You will monitor SecOps health dashboards, assist with Splunk security alerts, and coordinate with NIH/ServiceNow administrators when changes exceed SIRT permissions. Occasional SOC support and strong documentation are required.

Qualifications

• Experience with ServiceNow Vulnerability Response workflows and integrations.
• Ability to troubleshoot vulnerability-management workflows and data issues.
• Familiarity with security alert triage and SIEM tooling (Splunk).
• Ability to script, use APIs, or automate tasks.

Responsibilities

• Maintain and support ServiceNow Vulnerability Response operations.
• Monitor SecOps health dashboards and scheduled jobs.
• Support integrations with Tenable and Invicti.
• Reclassify discovered items; manage vulnerability data quality and CMDB updates.
• Maintain vulnerability assignment rules and automate routing to teams.
• Coordinate with NIH/ServiceNow admins for changes beyond SIRT permissions.
• Provide secondary SOC support for initial triage of Splunk alerts.
• Develop and improve workflows and integration enhancements.

Skills

ServiceNow

Vulnerability Response

Vulnerability management workflows

Tenable

Invicti

CMDB concepts

Workflow troubleshooting

APIs / automation

Splunk

Security alert triage

Documentation

Tools

GitHub Advanced Security

SCCM Patch Orchestration

ServiceNow

Splunk

Job description

Location: Rockville, MD (Primarily Onsite)

Position Summary

The SecDevOps / ServiceNow SME supports NIAID SIRT cybersecurity operations through the maintenance, administration, and enhancement of ServiceNow Vulnerability Response workflows, cybersecurity tool integrations, vulnerability-management automation, and related SecDevOps activities. The position also provides limited support to SOC security-alert review and triage as operational needs permit.

Primary Responsibilities

ServiceNow Vulnerability Response / SecDevOps

• Maintain and support ServiceNow Vulnerability Response (VR) operations.
• Monitor SecOps health dashboards and scheduled jobs.
• Support and troubleshootTenable and Invicti integrationswith ServiceNow VR.
• Reclassify discovered items and address vulnerability-record data issues.
• Maintain and update vulnerability assignment rules.
• Identify appropriate support groups and support applicable CMDB updates.
• Maintain and improve automated routing of vulnerabilities to responsible support teams.
• Troubleshoot VR workflow, integration, and data-quality issues.

Integration & Enhancement

• Support development, testing, and implementation of cybersecurity integrations and workflow enhancements.
• Support ongoing initiatives such asGitHub Advanced Security integration and SCCM Patch Orchestration.
• Assist with ServiceNow/CMDB integration and data-quality improvements.
• Coordinate with NIH/ServiceNow administrators when required changes exceed SIRT permissions or access.

SOC Support

• Provide secondary support for review and initial triage ofSplunk security alertsas workload and operational priorities permit.
• Assist with gathering available security context needed to evaluate alerts.
• Escalate potentially significant security activity to the Cybersecurity Analyst/SOC Lead for further investigation.
• Provide feedback on repetitive or noisy alerts that may benefit from tuning or automation.

Documentation & Continuity

• Maintain technical documentation and operational procedures for supported workflows and integrations.
• Support knowledge transfer and cross-training within SIRT to reduce single-person dependencies.

Desired Experience

• ServiceNow, preferablyVulnerability Response
• Vulnerability-management workflows
• Tenable and/or Invicti
• CMDB concepts and data management
• Workflow/integration troubleshooting
• Basic scripting, APIs, or automation
• Familiarity with Splunk or another SIEM
• Basic cybersecurity alert triage and analysis
• Strong technical documentation and troubleshooting skills