ServiceNow SecOps Engineer – Threat Detection & Automation

Nightwing Technologies, LLC

Sterling (VA)

Hybrid

USD 140,000 - 190,000

Full time

2 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

Nightwing Technologies, LLC is seeking a ServiceNow SecOps Business Process/Technical Consultant to design, develop, and implement SecOps capabilities within the ServiceNow platform. The hybrid role requires translating security requirements into scalable, secure automation and integrations with SIEM tools.

You will lead workshops with SOC, IR, and VR teams and deliver real-time analytics through dashboards.

Qualifications

U.S. Citizenship required; must be located on U.S. soil.
Must be able to obtain DHS program suitability and a TS/SCI clearance.
8+ years of software development, IT security, or IT systems engineering experience.
Minimum 4+ years of ServiceNow experience, with at least 2+ years focused on SecOps applications (SIR, VR, CC, or TI).
Strong knowledge of ServiceNow administration, advanced configuration, and custom application development.

Responsibilities

Designing, prototyping, and implementing ServiceNow SecOps applications, including: Security Incident Response (SIR): enrichment, correlation rules, and automated playbooks.
Vulnerability Response (VR): scanner integrations, remediation workflows, patch group automation.
Configuration Compliance (CC): policy exception handling, remediation tasks, compliance dashboards.
Threat Intelligence (TI): ingestion of IOCs, sightings search, enrichment workflows.
Supporting the customer's roadmap for Splunk integrations to enable alert ingestion, bi-directional incident synchronization, and SIEM dashboards.
Developing custom integrations with SIEM, scanner, and intel tools (e.g., Splunk, Tenable, VirusTotal, Hybrid Analysis) using IntegrationHub, REST/SOAP APIs, and MID Server.
Building and maintaining orchestration playbooks, Flow Designer workflows, Business Rules, and Script Includes to automate enrichment and response actions.
Documenting and maintaining policies, procedures, and technical designs aligned with Agile development practices and secure coding standards.
Leading workshops with SOC, IR, and VR teams to capture mission needs, define business requirements, and translate them into technical solutions.
Creating and maintaining Performance Analytics dashboards and KPIs to provide real-time visibility into security posture.
Supporting incident resolution, troubleshooting, and sustainment of the ServiceNow SecOps environment.
Providing mentorship and knowledge transfer to client staff on best practices and solution sustainment.