ServiceNow Security Developer

The Midtown Group; Manassas (VA); On-site; USD 124,000 - 193,000; Full time

Job summary

The Midtown Group is seeking a Senior ServiceNow Developer with deep expertise in VR or IRM/GRC to join a 12+ month contract. You will build and maintain complex ServiceNow security modules, integrate cloud scanners via REST APIs, and lead the IRM/GR C implementation within a fast-paced agile environment.

You must demonstrate strong knowledge of CMDB/CSDM, Cloud CIs, and vulnerability lifecycle, with live coding expectations during an interview using a Personal Developer Instance (PDI).

Qualifications

• 3-5+ years of dedicated ServiceNow development experience.
• Deep, project-level expertise in VR or IRM/GRC.
• Strong understanding of the Vulnerability Management Lifecycle.
• Proven ability to build REST API integrations from scratch.
• Knowledge of Cloud CIs and CMDB/CSDM interactions.
• Certifications: ServiceNow CAD, CSA, CIS-IRM/VR; recertification plan by 2026.
• Prepare to demonstrate coding skills in a live PDI interview.

Responsibilities

• Maintain the VR infrastructure and lead greenfield cloud module scanner implementation.
• Build custom API integrations to pull vulnerability data from cloud scanners when plugins are unavailable.
• Lead from-scratch IRM/GR C ompliance piece using Advanced Risk Assessments.
• Configure and troubleshoot complex workflows linking IRM Issues across risk and compliance modules.
• Map and connect Cloud CIs within CMDB/CSDM using CMDB/CSDM knowledge.
• Work in 2-week sprints with deployments weekly or bi-weekly.
• Collaborate with business risk consultants as a technical liaison.

Skills

ServiceNow Dev

Vulnerability Response

IRM/GRC

REST API Integrations

CMDB/CSDM

Cloud CIs

Agile Delivery

Stakeholder Communication

Job description

We are actively interviewing for the following job.

Job Title:

ServiceNow Security Developer (VR & IRM/GRC Focus)

Duration:

12+ Month Contract (Long-term)

About the Role:

We are seeking a highly skilled ServiceNow Application Developer with a strong specialization in the Security Operations (SecOps) space, specifically within Vulnerability Response (VR) and Integrated Risk Management (IRM/GRC). In this role, you will play a critical part in protecting our enterprise infrastructure by developing and maintaining complex ServiceNow security modules.

Note: We do not expect you to be a master of both modules—however, you must be a Senior-level expert in at least ONE of these areas (VR or IRM), with a solid working knowledge of the other.

• What You Will Do:Vulnerability Response (VR): Maintain the existing infrastructure layer while leading the greenfield implementation of Cloud module scanners.


• Custom Integrations: Build custom API integrations to pull vulnerability data from cloud-based scanners (such as AWS Inspector, Wiz, SentinelOne, Qualys, or MS Defender) when out-of-the-box plugins are not available.


• IRM / GRC: Lead the from-scratch implementation of the Compliance piece of the IRM module, building upon our existing Risk implementation and utilizing Advanced Risk Assessments.


• Workflow Architecture: Configure and troubleshoot complex workflows, specifically focusing on how IRM \"Issues\" interlink across various risk and compliance modules.


• CSDM Navigation: Utilize knowledge of CMDB and CSDM to accurately map and connect \"Cloud CIs\" (Configuration Items) within the platform.


• Agile Delivery: Operate in a fast-paced environment with 2-week sprints and rapid deployment cycles (deploying weekly or bi-weekly).


• Stakeholder Collaboration: Act as a technical liaison, translating complex risk and security requirements for business risk consultants.


• What We Are Looking For:3-5+ years of dedicated ServiceNow Development experience.


• Deep, project-level expertise in either ServiceNow Vulnerability Response (VR) OR Integrated Risk Management (IRM/GRC).


• Strong understanding of the Vulnerability Management Lifecycle.


• Proven ability to build custom API integrations (REST) from scratch.


• Knowledge of Cloud CIs and how they interact within the CMDB/CSDM framework.


• Strong communication skills to interface directly with business consultants.


• Certifications: ServiceNow CAD, CSA, and CIS-IRM/VR (Recently expired certifications are acceptable provided there is a plan to recertify by 2026).


• Interview Note: Candidates must be prepared to demonstrate their coding skills in a live technical interview using a Personal Developer Instance (PDI).