Vulnerability Management Engineer (ServiceNow) - Mid-Atlantic region (Remote)

GuidePoint Security, LLC; United States; Remote; USD 110,000 - 165,000; Full time

Job summary

GuidePoint Security, LLC is seeking a Vulnerability Management Engineer - ServiceNow to design, build, and operate ServiceNow Security Operations and Vulnerability Response capabilities for client-facing exposure management programs.

You will integrate scanners and threat intel, develop automated vulnerability workflows, and enable risk-based remediation while delivering high-quality service to clients and internal teams.

Responsibilities

• Design, configure, and support ServiceNow Vulnerability Response (VR) to manage the end-to-end vulnerability

Tools

ServiceNow

CMDB/ITOM

Vulnerability Response

Job description

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation's top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

General Description

We are looking for a Vulnerability Management Engineer - ServiceNow to support GuidePoint Security's Mid-Atlantic Exposure Management practice by designing, building, and operating the ServiceNow Security Operations and Vulnerability Response (VR) capabilities that power our clients' vulnerability and exposure management programs. This role will engage in the development of automated vulnerability lifecycle workflows, security tool integrations, and risk-based remediation processes while providing "Wow Them" service to clients and/or internal customers or co-workers.

The Vulnerability Management Engineer - ServiceNow will be required to demonstrate strong ServiceNow Security Operations engineering, scripting, and integration skills, lead by influence, and strong business/financial acumen to drive the use of progressive vulnerability response and exposure management programs that will align the delivery of business objectives and priorities.

About the Mid-Atlantic Exposure Management Practice

The Mid-Atlantic Exposure Management Practice is responsible for helping clients continuously identify, prioritize, and remediate the vulnerabilities and exposures that pose the greatest risk to their business. We design, implement, and operate the platforms and automation - with ServiceNow Security Operations at the center - that turn raw scanner output into governed, measurable, and business-aware remediation across the organization.

Our team of ServiceNow Security Operations engineers, vulnerability management specialists, and automation developers focuses on Vulnerability Response, Security Operations, and exposure management - using CMDB/ITOM asset context, risk-based prioritization, and Flow Designer automation. We partner with client security, infrastructure, and application teams to shrink remediation timelines, improve SLA adherence, and demonstrate real risk reduction.

Key focus areas of the practice:

• Building and tuning ServiceNow Vulnerability Response and Security Operations workflows
• Integrating scanners and threat intelligence (Qualys, Tenable, Rapid7, Defender, CrowdStrike) into a unified remediation pipeline
• Enabling risk-based, asset-aware prioritization using CMDB, Discovery, and Service Mapping

Roles and Responsibilities:

ServiceNow Vulnerability Response (VR) Engineering

• Design, configure, and support ServiceNow Vulnerability Response (VR) to manage the end-to-end vulnerability