Vulnerability Response Engineer - ServiceNow Security Ops

guidepointsecurity; United States; Remote; USD 120,000 - 170,000; Full time

Job summary

GuidePoint Security is seeking a ServiceNow Security Operations Engineer in the United States to design, implement, and operate vulnerability response and remediation workflows. You will integrate scanners and security tools, develop risk-based prioritization, and collaborate with cross-functional teams to reduce exposure and improve incident response.

The role emphasizes connecting technical risk to business context, with opportunities to automate processes and improve dashboards and reporting

Qualifications

• Strong ServiceNow Security Operations engineering skills, including Vulnerability Response configuration and workflow development.
• Scripting and integration experience with JavaScript, Python, HTML/CSS.

Responsibilities

• Configure Vulnerability Response workflows from scanner-data intake through assignment, remediation, verification and closure.
• Create remediation flows, vulnerability groups, assignment rules, and risk calculators.
• Develop risk-based prioritization considering severity, threat information, exploitability, and asset criticality.
• Integrate vulnerability scanners and security tools into remediation processes with CMDB/Discovery/Service Mapping context.
• Coordinate remediation with security, infrastructure, and application teams; build dashboards and SLA reporting.
• Automate manual work and support related Security Operations capabilities, such as incident response or configuration compliance.

Skills

ServiceNow Security Operations

Vulnerability Response configuration

Workflow development

JavaScript

Tools

Python

HTML/CSS

Job description

GuidePoint Security is seeking a ServiceNow Security Operations Engineer in the United States to design, implement, and operate vulnerability response and remediation workflows. You will integrate scanners and security tools, develop risk-based prioritization, and collaborate with cross-functional teams to reduce exposure and improve incident response.

The role emphasizes connecting technical risk to business context, with opportunities to automate processes and improve dashboards and reporting