Cyber ServiceNow SIR – Business Process Consultant

Deloitte • Jersey City, NJ

63d • $82,600 - $162,800

About The Position

Deloitte Cyber is hiring a Business Process Consultant for its ServiceNow Security Incident Response (SIR) work. The role supports clients in navigating cybersecurity threats by helping develop and transform cyber programs and implement ServiceNow capabilities across SecOps, Integrated Risk Management, and IT Asset Management. The position involves client-facing consulting, process analysis, requirements development, functional design, implementation support, and delivery coordination. Travel averages 50%, depending on the work and clients served. Recruiting for this role ends on 05/31/2027.

Requirements

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, Information Technology, or Business Administration.
• ServiceNow Certified System Administrator (CSA) certification and at least 2 years supporting ServiceNow implementation projects in a client-facing consulting role.
• At least 2 years gathering business requirements, facilitating workshops, and documenting process flows or user stories.
• At least 2 years designing, configuring, or implementing ServiceNow Security Incident Response (SIR).
• Experience supporting security operations center (SOC) and incident response processes.
• Ability to travel an average of 50%, based on assigned work and clients served.
• Ability to work independently and collaboratively as part of a team.
• Effective written and verbal communication skills; strong interpersonal skills and a professional demeanor.
• Meticulous attention to detail and quality of work product.
• Ability to build and sustain professional relationships, lead projects or workstreams, manage and prioritize multiple tasks in a fast-paced environment, meet deadlines, and provide clear guidance to others.

Nice To Haves

• One or more of the following credentials: ServiceNow Certified Application Developer (CAD), ServiceNow Certified Implementation Specialist – Security Incident Response (CIS-SIR), or Architecture Excellence (ArchX).
• Experience with ServiceNow Major Security Incident Management, Data Loss Prevention, or Threat Intelligence Security Center (TISC) applications.
• Experience applying NIST Special Publication 800-61, NIST Cybersecurity Framework (CSF), or MITRE ATT&CK.
• Experience integrating ServiceNow with SIEM or EDR tools, including Splunk, Microsoft Sentinel, CrowdStrike, or Microsoft Defender.
• Experience using Now Assist for Security Operations.
• Experience as a SOC analyst or incident responder.

Responsibilities

• Facilitate workshops, stakeholder interviews, and requirements gathering with SOC, incident response, and threat intelligence teams; document current- and future-state processes aligned with ServiceNow out-of-the-box principles.
• Map incident lifecycles, supporting tools, and data to ServiceNow SIR capabilities and data models; identify gaps and migration considerations.
• Develop epics, user stories, requirements, RACI matrices, data flows, and integration needs for SIEM, EDR, TISC, and CMDB platforms.
• Support functional design and configuration of the SIR workspace, incident forms and states, assignment and escalation rules, response tasks, playbooks, flows, notifications, SLAs, dashboards, roles, and access controls.
• Produce test scenarios, training materials, and release notes.
• Manage user story assignment, backlog grooming, sprint preparation, story refinement, demonstrations, user acceptance testing, defect triage, cutover, and risk tracking with engagement managers.
• Lead projects or workstreams, prioritize multiple tasks, provide guidance to others, and build professional relationships while delivering quality work and meeting deadlines.

Benefits

• May be eligible to participate in a discretionary annual incentive program, subject to program rules and applicable factors.
• Professional development opportunities, including on-the-job learning, formal development programs, leadership opportunities, and mentorship.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level