Senior Lead, ServiceNow Developer

Description

The company is a global provider of wealth management, asset servicing, asset management and banking services for individuals, families, corporations and institutions. It was founded in 1889, has over 135 years of financial experience and employs more than 24,000 people.

This senior developer role focuses on building, integrating and improving ServiceNow security operations tools for Vulnerability Response and Configuration Compliance.

You will work with cybersecurity, vulnerability management, configuration management, CMDB, infrastructure and ServiceNow platform teams to turn vulnerability and configuration data into remediation workflows.

You will lead hands-on technical work across implementation, integration, automation, troubleshooting, platform upgrades and production support.

The ideal candidate is a strong ServiceNow developer who also understands enterprise vulnerability management, configuration compliance, CMDB relationships and security remediation.

Responsibilities

• Design, configure, build and enhance Vulnerability Response capabilities in ServiceNow.
• Build workflows that handle vulnerability ingestion, normalization, prioritization, assignment, remediation, exceptions and closure.
• Configure and customize vulnerability records, business rules, Script Includes, UI policies, client scripts, Flow Designer flows, scheduled jobs, notifications and other platform components.
• Connect ServiceNow to enterprise vulnerability scanning and security tools using REST APIs, IntegrationHub, MID Servers and other supported methods.
• Automate vulnerability assignment, remediation orchestration, exception handling and operational reporting.
• Troubleshoot issues with data ingestion, reconciliation, CI matching, assignment and integrations.
• Build scalable solutions that help remediation teams handle large volumes of vulnerability data.
• Design and implement Configuration Compliance capabilities that support enterprise security and configuration-control requirements.
• Build workflows that ingest, evaluate, route, track and remediate configuration compliance findings.
• Automate assignment of compliance findings using CI ownership, support groups, infrastructure responsibility and other defined business rules.
• Support exception and remediation workflows for configuration compliance.
• Work with security and infrastructure teams to turn control requirements into workflows and technical solutions that can be sustained.
• Build dashboards and reports showing compliance findings, remediation status, exceptions and aging.
• Make sure Vulnerability Response and Configuration Compliance solutions use ServiceNow CMDB data and CI relationships properly.
• Build and troubleshoot CI matching and reconciliation logic that links security findings to configuration items.
• Find and fix data-quality problems that stop findings from being routed or assigned correctly.
• Work with CMDB and Discovery teams to improve CI identification and data quality when findings cannot be reliably tied to infrastructure assets.
• Write maintainable server-side and client-side ServiceNow code, including JavaScript, Glide APIs, Script Includes, Business Rules, UI Actions, Client Scripts, ACLs and scheduled processing.
• Build automation with Flow Designer, IntegrationHub, REST and SOAP APIs and MID Server integrations.
• Design solutions that limit unnecessary customization and fit ServiceNow architecture and upgrade practices.
• Lead technical design reviews and create reusable components and integration patterns.
• Troubleshoot complex application, integration, data, performance and production issues.
• Write automated tests with the ServiceNow Automated Test Framework (ATF) where it makes sense.
• Support platform upgrades, patches, regression testing, release validation and production deployments.
• Maintain technical documentation, solution designs, configuration records and operational support procedures.
• Act as a senior technical resource for Vulnerability Response and Configuration Compliance.
• Turn cybersecurity and vulnerability management requirements into scalable ServiceNow designs.
• Review code and promote ServiceNow development standards across teams.
• Work with ServiceNow architects, security architects, infrastructure engineers, product owners and external implementation partners.
• Assess technical debt and recommend replacing custom code with supported platform features.
• Take part in architecture, design, release-readiness and production-support reviews.

Requirements

• Required qualification: at least 5 years of hands-on ServiceNow development or engineering experience.
• Required qualification: strong experience with JavaScript, Glide APIs, Script Includes, Business Rules, Client Scripts, UI Policies, ACLs, Flow Designer, IntegrationHub, REST and SOAP integrations, MID Server, Import Sets, Transform Maps and the Automated Test Framework.
• Required qualification: hands-on experience implementing, developing or supporting ServiceNow Vulnerability Response.
• Required qualification: experience with Configuration Compliance or comparable ServiceNow security or compliance capabilities.
• Required qualification: solid understanding of the ServiceNow CMDB, CI relationships, asset and CI identification and the data-quality factors they depend on.
• Required qualification: experience troubleshooting integrations and high-volume data processing.
• Required qualification: experience designing solutions across development, test/UAT and production environments.
• Required qualification: understanding of source control, release management, testing and enterprise change management.
• Preferred qualification: 5 to 7 years of experience integrating ServiceNow with vulnerability or security platforms such as Tenable, Qualys, Rapid7, Microsoft Defender or similar.
• Preferred qualification: experience with ServiceNow Security Operations applications and enterprise cybersecurity workflows.
• Preferred qualification: understanding of vulnerability management concepts such as CVEs, CVSS scoring, remediation, risk prioritization, vulnerability exceptions and remediation SLAs.
• Preferred qualification: understanding of configuration security benchmarks and standards such as CIS Benchmarks or NIST guidance.
• Preferred qualification: experience with ServiceNow Discovery, Service Graph Connectors or other CMDB data sources.
• Preferred qualification: experience with DevOps or CI/CD practices for ServiceNow development.
• Preferred qualification: experience working in a large, highly regulated enterprise.
• Preferred certification: ServiceNow Certified System Administrator (CSA).
• Preferred certification: ServiceNow Certified Application Developer (CAD).
• Preferred certification: a relevant ServiceNow Security Operations or Vulnerability Response implementation certification or accreditation.
• Security certifications such as Security+ or CISSP are helpful but not required.
• Core competencies: advanced ServiceNow development and troubleshooting, vulnerability and security workflow automation, configuration compliance, CMDB and CI data management, enterprise integrations, technical solution design, root-cause analysis and production support, secure coding and platform governance, cross-functional collaboration, and technical documentation and knowledge transfer.
• Success in this role means building reliable, scalable VR and Configuration Compliance solutions that automate vulnerability and compliance remediation, improve the accuracy of CI-to-finding links, reduce manual assignment and remediation work, give clearer visibility into vulnerabilities, compliance findings, exceptions and remediation status, keep the platform stable, maintainable, secure and upgradeable, and help security and infrastructure teams move from finding to accountable remediation and closure.

Conditions

Base pay range is $114,500 to $194,700 USD. This range is a good faith estimate of base pay.

You must be authorized to work in the U.S. now and in the future without employment-based visa sponsorship.

The company will not sponsor U.S. work visas for this role, including H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa.

Benefits

• Retirement benefits, including a 401k and a pension.
• Health and welfare benefits, including medical, dental, vision, spending accounts and disability coverage.
• Paid time off, parental and caregiver leave, life and accident insurance, and other voluntary and well-being benefits.
• A discretionary bonus program that may include an equity component.