Vulnerability Management Engineer (ServiceNow) - Mid-Atlantic region (Remote)
GuidePoint Security12 hours ago
Remote, United StatesEntry Level / Mid Level
H1B sponsor
Responsibilities
- Design, configure, and support ServiceNow Vulnerability Response and Security Operations capabilities across the vulnerability lifecycle.
- Build workflows, vulnerability groups, assignment rules, calculators, dashboards, KPIs, and SLA monitoring using ServiceNow technologies.
- Integrate vulnerability scanners, security tools, threat intelligence, and asset data through APIs and normalize findings in ServiceNow.
- Use CVSS, exploitability, threat intelligence, business criticality, CMDB, Discovery, and Service Mapping to drive risk-based remediation.
- Develop automation and reporting with JavaScript, HTML/CSS, Python, Flow Designer, and Business Rules.
- Coordinate remediation with client infrastructure, security, and application teams and provide operational support, incident support, governance, and documentation.
- Support exposure management initiatives, integration troubleshooting, root cause investigations, and continuous process optimization.
Requirements
- A bachelor's degree in computer science, information systems, or a related field is preferred.
- At least 1-2+ years of experience with ServiceNow Security Operations, CMDB implementation, and integration.
- Hands-on experience configuring ServiceNow Vulnerability Response, Security Operations, Flow Designer, and workflows.
- Experience integrating Qualys, Tenable, Rapid7, Microsoft Defender, or CrowdStrike with ServiceNow through APIs.
- Working knowledge of vulnerability management, CVSS, risk assessment, exploitability, SLA-driven remediation, and ITOM concepts.
- Strong programming skills in Python, JavaScript, HTML/CSS, and other ServiceNow technologies.
- Preferred experience includes exposure management or RBVM, threat intelligence enrichment, Security Incident Response workflows, and ServiceNow dashboards, KPI, SLA, and compliance reporting.
- ServiceNow certifications such as Certified System Administrator, Certified Application Developer, Certified Application Specialist, or relevant Certified Implementation Specialist certifications are preferred.
- Strong analytical, problem-solving, communication, documentation, and collaboration skills.
Benefits
- Remote workforce primarily; the role is U.S.-based only and may require up to 10% travel or on-site work for certain federal positions.
- Medical insurance options include a zero-deductible PPO or a high-deductible health plan with HSA contributions.
- Dental insurance is available, with GuidePoint paying stated portions of employee and family premiums.
- Twelve corporate holidays and a Flexible Time Off program.
- Mobile phone and home internet allowance.
- Retirement plan eligibility after two months at open enrollment.
- Pet benefit option.
Tech Stack
Categories
About GuidePoint Security
GuidePoint Security provides cybersecurity consulting, managed services, and value-added reselling/integration of security products for enterprises and U.S. public-sector agencies. Its teams deliver assessments, penetration testing, cloud and application security, identity and access management, endpoint and network protection, and governance services. Founded in 2011 and headquartered in Reston, Virginia, the privately held company serves Fortune 500 organizations and cabinet-level federal agencies.