Senior Lead, ServiceNow Developer

Northern Trust•Chicago, IL

4d•$114,500 - $194,700

About The Position

The Senior ServiceNow Developer – Vulnerability Response & Configuration Compliance designs, develops, integrates, and optimizes ServiceNow security operations capabilities focused on Vulnerability Response (VR) and Configuration Compliance (CC). The role partners with Cybersecurity, Vulnerability Management, Configuration Management, CMDB, Infrastructure, and ServiceNow platform teams to turn vulnerability and configuration data into actionable remediation workflows. It provides hands-on technical leadership across implementation, integration, automation, troubleshooting, platform upgrades, and production support. The developer builds scalable solutions for vulnerability ingestion, normalization, prioritization, assignment, remediation, exception management, and closure, as well as workflows for configuration compliance findings. The role also ensures that security findings are accurately associated with ServiceNow CMDB configuration items, improves data quality and routing, develops integrations and reporting, supports testing and releases, and maintains technical and operational documentation. The position contributes to technical design reviews, code reviews, platform governance, and production-support readiness. Northern Trust describes a flexible and collaborative work culture, encourages movement within the organization, and emphasizes an inclusive workplace and community service. Applicants must be authorized to work in the U.S. without current or future employment-based visa sponsorship.

Requirements

At least 5 years of hands-on ServiceNow development or engineering experience.
Strong ServiceNow development experience with JavaScript, Glide APIs, Script Includes, Business Rules, Client Scripts, UI Policies, ACLs, Flow Designer, IntegrationHub, REST/SOAP integrations, MID Server, Import Sets and Transform Maps, and Automated Test Framework.
Hands-on experience implementing, developing, or supporting ServiceNow Vulnerability Response.
Experience with Configuration Compliance or comparable ServiceNow security/compliance capabilities.
Strong understanding of ServiceNow CMDB, CI relationships, asset/CI identification, and data-quality dependencies.
Experience troubleshooting integrations and high-volume data-processing workflows.
Experience designing solutions across development, test/UAT, and production environments.
Understanding of source control, release management, testing, and enterprise change-management practices.
Authorization to work in the U.S. without employment-based visa sponsorship now or in the future.

Nice To Haves

5–7 years of experience integrating ServiceNow with vulnerability or security platforms such as Tenable, Qualys, Rapid7, Microsoft Defender, or similar technologies.
Experience with ServiceNow Security Operations applications and enterprise cybersecurity workflows.
Understanding of vulnerability management concepts, including CVEs, CVSS scoring, remediation, risk prioritization, vulnerability exceptions, and remediation SLAs.
Understanding of configuration security benchmarks and standards such as CIS Benchmarks or NIST guidance.
Experience with ServiceNow Discovery, Service Graph Connectors, or other CMDB data sources.
Experience with DevOps/CI-CD practices for ServiceNow development.
Experience operating ServiceNow in a large, highly regulated enterprise environment.
ServiceNow Certified System Administrator (CSA).
ServiceNow Certified Application Developer (CAD).
Relevant ServiceNow Security Operations or Vulnerability Response implementation certification or accreditation.
Security certifications such as Security+ or CISSP, or similar.

Responsibilities

Design, configure, develop, and enhance ServiceNow Vulnerability Response capabilities.
Develop workflows for vulnerability ingestion, normalization, prioritization, assignment, remediation, exception management, and closure.
Configure vulnerability-related records and platform components, including business rules, Script Includes, UI policies, client scripts, Flow Designer flows, scheduled jobs, and notifications.
Integrate ServiceNow with enterprise vulnerability scanning and security platforms using REST APIs, IntegrationHub, MID Servers, and other supported mechanisms.
Automate vulnerability assignment, remediation orchestration, exception handling, and operational reporting.
Troubleshoot data ingestion, reconciliation, CI matching, assignment, and integration issues, and support high-volume vulnerability data management.
Design and implement Configuration Compliance capabilities and workflows to ingest, evaluate, route, track, and remediate findings.
Automate compliance-finding assignment based on CI ownership, support groups, infrastructure responsibility, and defined business rules.
Support configuration compliance exception and remediation workflows; translate control requirements into sustainable technical solutions with Security and Infrastructure teams.
Develop dashboards and reports showing compliance findings, remediation status, exceptions, and aging.
Ensure Vulnerability Response and Configuration Compliance solutions use CMDB data and CI relationships appropriately.
Develop and troubleshoot CI matching and reconciliation logic; identify and remediate data-quality issues affecting routing or ownership.
Partner with CMDB and Discovery teams to improve CI identification and data quality.
Develop maintainable ServiceNow solutions using server-side and client-side scripting, Glide APIs, ACLs, scheduled processing, Flow Designer, IntegrationHub, APIs, and MID Server integrations.
Design solutions that minimize unnecessary customization and align with ServiceNow architecture and upgradeability principles.
Perform technical design reviews and develop reusable components and integration patterns.
Troubleshoot complex application, integration, data, performance, and production issues.
Develop automated tests using ServiceNow Automated Test Framework where appropriate.
Support platform upgrades, patches, regression testing, release validation, and production deployments.
Maintain technical documentation, solution designs, configuration documentation, and operational support procedures.
Serve as a senior technical resource for Vulnerability Response and Configuration Compliance and translate cybersecurity requirements into scalable technical designs.
Conduct code reviews and promote ServiceNow development standards.
Collaborate with architects, security and infrastructure engineering teams, product owners, and external implementation partners.
Evaluate technical debt and recommend replacing customizations with supported platform functionality.
Participate in architecture, design, release-readiness, and production-support reviews.