Senior Lead, ServiceNow Developer

ntrs; Chicago (IL); On-site; USD 120,000 - 150,000; Full time

Job summary

Northern Trust is seeking a Senior ServiceNow Developer focused on Vulnerability Response and Configuration Compliance to design, develop, integrate, and optimize security operations workflows within the ServiceNow platform.

You will partner with Cybersecurity and Infrastructure teams to implement scalable processes, automate remediation, and deliver dashboards for risk visibility across enterprise assets.

Qualifications

• Senior ServiceNow Developer responsible for design, development, integration, and optimization of VR and CC capabilities.
• Ideal candidate combines strong ServiceNow development with understanding of enterprise vulnerability management, configuration compliance, CMDB relationships, and security remediation processes.

Responsibilities

• Design, configure, develop, and enhance ServiceNow Vulnerability Response capabilities.
• Develop workflows for vulnerability ingestion, normalization, prioritization, assignment, remediation, exceptions, and closure.
• Configure and customize vulnerability-related records, rules, UI policies, scripts, flows, notifications, and other components.
• Integrate ServiceNow with enterprise vulnerability scanning and security platforms using REST APIs, IntegrationHub, MID Servers.
• Develop automation to improve vulnerability assignment, remediation orchestration, exception handling, and reporting.
• Troubleshoot data ingestion, reconciliation, CI matching, assignment, and integration issues.
• Support remediation teams with scalable solutions for large vulnerability data volumes.
• Design and implement ServiceNow Configuration Compliance capabilities and workflows for finding ingestion, evaluation, routing, tracking, and remediation.
• Automate assignment of findings based on CI ownership and infrastructure responsibility.
• Develop dashboards and reporting for visibility into findings, remediation, exceptions, and aging.
• Ensure VR and CC solutions leverage CMDB data and CI relationships; troubleshoot matching and data quality.
• Develop maintainable server-side and client-side scripts, Flow Designer logic, REST/SOAP integrations, and automated tests.

Skills

ServiceNow development

Vulnerability management

Configuration compliance

CMDB relationships

REST APIs

Flow Designer

IntegrationHub

MID Server

JavaScript

Glide APIs

ATF

Tools

REST APIs

MID Server

IntegrationHub

Flow Designer

SOAP APIs

Glide APIs

ATF

Job description

About Northern Trust

As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world's most successful individuals, families, corporations and institutions.

Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide.

With more than 135 years of financial experience and over 24,000 partners, we serve the world's most sophisticated clients using leading technology and exceptional service.

The Senior ServiceNow Developer - Vulnerability Response & Configuration Compliance

The Senior ServiceNow Developer - Vulnerability Response & Configuration Compliance is responsible for the design, development, integration, and ongoing optimization of ServiceNow security operations capabilities focused on Vulnerability Response (VR) and Configuration Compliance (CC) . This role will partner with Cybersecurity, Vulnerability Management, Configuration Management, CMDB, Infrastructure, and ServiceNow platform teams to transform vulnerability and configuration data into actionable remediation workflows. The developer will provide hands‑on technical leadership across implementation, integration, automation, troubleshooting, platform upgrades, and production support.

The ideal candidate combines strong ServiceNow development experience with an understanding of enterprise vulnerability management, configuration compliance, CMDB relationships, and security remediation processes.

Key Responsibilities

Vulnerability Response

• Design, configure, develop, and enhance ServiceNow Vulnerability Response capabilities.
• Develop workflows supporting vulnerability ingestion, normalization, prioritization, assignment, remediation, exception management, and closure.
• Configure and customize vulnerability‑related records, business rules, Script Includes, UI policies, client scripts, Flow Designer flows, scheduled jobs, notifications, and other platform components.
• Integrate ServiceNow with enterprise vulnerability scanning and security platforms using REST APIs, IntegrationHub, MID Servers, and other supported integration mechanisms.
• Develop automation to improve vulnerability assignment, remediation orchestration, exception handling, and operational reporting.
• Troubleshoot data ingestion, reconciliation, CI matching, assignment, and integration issues.
• Support vulnerability remediation teams with scalable solutions for managing large volumes of vulnerability data.

Configuration Compliance

• Design and implement ServiceNow Configuration Compliance capabilities supporting enterprise security and configuration‑control requirements.
• Develop workflows to ingest, evaluate, route, track, and remediate configuration compliance findings.
• Automate assignment of compliance findings based on CI ownership, support groups, infrastructure responsibility, and other defined business rules.
• Support configuration compliance exception and remediation workflows.
• Partner with Security and Infrastructure teams to translate control requirements into sustainable ServiceNow workflows and technical solutions.
• Develop dashboards and reporting that provide visibility into compliance findings, remediation status, exceptions, and aging.

CMDB & Data Quality

• Ensure VR and Configuration Compliance solutions appropriately leverage ServiceNow CMDB data and CI relationships.
• Develop and troubleshoot CI matching and reconciliation logic used to associate security findings with configuration items.
• Identify and remediate data‑quality issues that prevent accurate routing or ownership of security findings.
• Partner with CMDB and Discovery teams to improve CI identification and data quality where vulnerabilities or compliance findings cannot be reliably associated with infrastructure assets.

ServiceNow Development & Engineering

• Develop maintainable solutions using ServiceNow server‑side and client‑side scripting, including JavaScript, Glide APIs, Script Includes, Business Rules, UI Actions, Client Scripts, ACLs, and scheduled processing.
• Build automation using Flow Designer , IntegrationHub , REST/SOAP APIs, and MID Server integrations.
• Design solutions that minimize unnecessary customization and align with ServiceNow platform architecture and upgradeability principles.
• Perform technical design reviews and develop reusable components and integration patterns.
• Troubleshoot complex application, integration, data, performance, and production issues.
• Develop automated tests using ServiceNow Automated Test Framework (ATF), where appropriate.
• Support platform upgrades, patches, regression testing, release validation, and production deployments.
• Maintain technical documentation, solution designs, configuration documentation, and operational support procedures.

Technical Leadership

Serve as a senior technical resourc