ServiceNow Security Developer (VR & IRM/GRC Focus)

We are seeking a highly skilled ServiceNow Application Developer with a strong specialization in the Security Operations (SecOps) space, specifically within Vulnerability Response (VR) and Integrated Risk Management (IRM/GRC). In this role, you will play a critical part in protecting our enterprise infrastructure by developing and maintaining complex ServiceNow security modules., * What You Will Do:Vulnerability Response (VR): Maintain the existing infrastructure layer while leading the greenfield implementation of Cloud module scanners. \n

• Custom Integrations: Build custom API integrations to pull vulnerability data from cloud-based scanners (such as AWS Inspector, Wiz, SentinelOne, Qualys, or MS Defender) when out-of-the-box plugins are not available. \n

• IRM / GRC: Lead the from-scratch implementation of the Compliance piece of the IRM module, building upon our existing Risk implementation and utilizing Advanced Risk Assessments. \n

• Workflow Architecture: Configure and troubleshoot complex workflows, specifically focusing on how IRM “Issues” interlink across various risk and compliance modules. \n

• CSDM Navigation: Utilize knowledge of CMDB and CSDM to accurately map and connect “Cloud CIs” (Configuration Items) within the platform. \n

• Agile Delivery: Operate in a fast-paced environment with 2-week sprints and rapid deployment cycles (deploying weekly or bi-weekly). \n

• Stakeholder Collaboration: Act as a technical liaison, translating complex risk and security requirements for business risk consultants.

Note: We do not expect you to be a master of both modules-however, you must be a Senior-level expert in at least ONE of these areas (VR or IRM), with a solid working knowledge of the other., * What We Are Looking For:3-5+ years of dedicated ServiceNow Development experience. \n

• Deep, project-level expertise in either ServiceNow Vulnerability Response (VR) OR Integrated Risk Management (IRM/GRC). \n

• Strong understanding of the Vulnerability Management Lifecycle. \n

• Proven ability to build custom API integrations (REST) from scratch. \n

• Knowledge of Cloud CIs and how they interact within the CMDB/CSDM framework. \n

• Strong communication skills to interface directly with business consultants. \n

• Certifications: ServiceNow CAD, CSA, and CIS-IRM/VR (Recently expired certifications are acceptable provided there is a plan to recertify by 2026). \n

• Interview Note: Candidates must be prepared to demonstrate their coding skills in a live technical interview using a Personal Developer Instance (PDI).