Enterprise Cybersecurity ServiceNow Developer, Senior

Booz Allen Hamilton•McLean, VA

12d•$86,800 - $198,000

About The Position

In this role, you’ll be part of a team advancing enterprise security posture through automation, smart design, and cutting edge SecOps, GRC, and program capabilities. This is an opportunity to modernize core functions such as vulnerability management and build scalable solutions that reduce risk and accelerate remediation across complex environments. You’ll design and implement integrations with ServiceNow Security Operations applications, including Vulnerability Response, Configuration Compliance, and Exceptions Management, to optimize security lifecycle management functions and streamline remediation workflows. Due to the nature of work performed within this facility, U.S. citizenship is required. Join us. The world can't wait.

Requirements

3+ years of experience developing ServiceNow solutions
3+ years of experience designing and implementing ServiceNow systems, solutions, or tools
1+ years of experience developing or administering ServiceNow Vulnerability Response (SecOps)
1+ years of experience integrating security scanners and ingesting data via APIs
Experience with IT Service Management (ITSM) and IT Operations Management (ITOM)
Experience building scripted web services using ServiceNow, JavaScript, jQuery, Prototype, or CMDB integrations
Experience with major vulnerability scanners such as Tenable, Qualys, or Rapid7
Knowledge of REST and GraphQL protocols
HS diploma or GED

Nice To Haves

Experience integrating ServiceNow SecOps with cloud security posture management (CSPM), cloud-native app protection platform (CNAPP), or web application scanners
Experience creating custom dashboards, reports, and Performance Analytics (PA) indicators for capturing KPIs and trends
ServiceNow Certified Application Developer (CAD) Certification
Certified Implementation Specialist – Vulnerability Response (CISVR) Certification

Responsibilities

Design and develop automation playbooks, Flow Designer workflows, Script Includes, and rule configurations that accelerate vulnerability remediation.
Configure and manage integrations with third-party security tools such as vulnerability scanners and MID servers.
Monitor and tune platform performance, troubleshoot complex issues, and support module upgrades.
Partner with stakeholders to gather requirements, document technical processes, and deliver dashboards and reporting that strengthen visibility and decision making.
Streamlining assignment rules, including cloud-based assignment logic.
Enhancing exclusion rules and automated closure processes.