ServiceNow Developer

Job Type Full-time Description Key Responsibilities Defensive Operations (SecOps): Design and automate the Security Incident Response (SIR) and Vulnerability Response (VR) lifecycles. Build playbooks in Flow Designer to automate threat containment and remediation. Offensive Operations: Develop custom scoped applications to track penetration testing results, manage red-team engagement lifecycles, and automate the ingestion of reconnaissance data. Compliance & GRC: Configure and customize Integrated Risk Management (IRM) modules to map technical controls to frameworks like SOC2, ISO 27001, HIPAA, and FedRAMP. Integrations & Orchestration: Build robust, secure integrations (REST/SOAP, IntegrationHub, MID Servers) with our XDR, SIEM (Splunk/Sentinel), and cloud-native services (AWS/Azure/GCP). Multi-Tenancy & MSSP Architecture: Architect a scalable, multi-tenant environment that ensures strict data isolation between clients while allowing for unified ClickOps and Terraform-driven automation. AI & Innovation: Explore and implement Now Assist (GenAI) and AI-heavy workflows to automate security reporting and incident summarization. Required Technical Skills ServiceNow Core: 5+ years of hands-on development (JavaScript, Glide API, Script Includes, Business Rules, UI Actions, and ACLs). Security Modules: Expert knowledge of ServiceNow SecOps (SIR, VR, Threat Intel) and GRC/IRM. Architecture: Deep understanding of the Common Service Data Model (CSDM) and CMDB health in a cybersecurity context. Automation: Advanced proficiency in Flow Designer, IntegrationHub, and Orchestration. Security Fundamentals: Familiarity with the MITRE ATT&CK framework, CVSS scoring, and common attack vectors. Preferred Qualifications Certifications: * ServiceNow Certified Application Developer (CAD). Certified Implementation Specialist (CIS) in Security Operations or Risk & Compliance. Security-centric certs like CISSP or CISA are a massive plus. Environment: Experience in Linux-heavy, open-source environments and building cloud-agnostic platforms. DevOps: Experience with OpenTofu/Terraform for infrastructure-as-code orchestration.