Role Overview
A ServiceNow SecOps Engineer designs, implements, and optimizes security operations workflows within the ServiceNow platform. The role bridges security tooling and IT service management, enabling efficient incident response, vulnerability remediation, and threat intelligence handling through automation and orchestration. Working closely with SOC teams, this engineer ensures security events are actionable, traceable, and continuously improved.
Key Responsibilities
Incident Response
* Configure and manage ServiceNow Security Incident Response (SIR) module
* Integrate SIEM tools (e.g., Splunk) for real-time alert ingestion
* Develop automated playbooks for triage, containment, and escalation
* Collaborate with SOC analysts to streamline response workflows
* Ensure proper documentation, tracking, and reporting of incidents
Vulnerability Management
* Implement and maintain ServiceNow Vulnerability Response (VR)
* Integrate vulnerability scan...