Senior Lead, ServiceNow Developer

Northern Trust • Chicago, IL

2d • $114,500 - $194,700

About The Position

The Senior ServiceNow Developer – Vulnerability Response & Configuration Compliance designs, develops, integrates, and optimizes ServiceNow security operations capabilities focused on Vulnerability Response (VR) and Configuration Compliance (CC). The role partners with Cybersecurity, Vulnerability Management, Configuration Management, CMDB, Infrastructure, and ServiceNow platform teams to turn vulnerability and configuration data into actionable remediation workflows. It provides hands-on technical leadership in implementation, integration, automation, troubleshooting, upgrades, and production support.

The developer builds and maintains ServiceNow solutions for vulnerability ingestion, prioritization, assignment, remediation, exceptions, and closure, as well as configuration compliance finding workflows. The role ensures these solutions use CMDB data and CI relationships effectively, addresses data-quality and matching issues, and supports reliable integrations and high-volume processing. It also contributes to technical design, code reviews, testing, releases, documentation, and production operations while promoting maintainable, secure, and upgradeable platform solutions.

Success is measured by scalable VR and Configuration Compliance solutions that improve remediation automation, CI-to-finding accuracy, visibility, and operational efficiency while maintaining platform stability, security, maintainability, and upgradeability.

Applicants must be authorized to work in the U.S. without employment-based visa sponsorship now or in the future.

Requirements

• At least 5 years of hands-on ServiceNow development or engineering experience.
• Strong ServiceNow development experience with JavaScript, Glide APIs, Script Includes, Business Rules, Client Scripts, UI Policies, ACLs, Flow Designer, IntegrationHub, REST/SOAP integrations, MID Server, Import Sets and Transform Maps, and Automated Test Framework.
• Hands-on experience implementing, developing, or supporting ServiceNow Vulnerability Response.
• Experience with Configuration Compliance or comparable ServiceNow security/compliance capabilities.
• Strong understanding of ServiceNow CMDB, CI relationships, asset/CI identification, and data-quality dependencies.
• Experience troubleshooting integrations and high-volume data-processing workflows.
• Experience designing solutions across development, test/UAT, and production environments.
• Understanding of source control, release management, testing, and enterprise change-management practices.
• Authorization to work in the U.S. without employment-based visa sponsorship, now or in the future.

Nice To Haves

• 5–7 years of experience integrating ServiceNow with vulnerability or security platforms such as Tenable, Qualys, Rapid7, or Microsoft Defender.
• Experience with ServiceNow Security Operations applications and enterprise cybersecurity workflows.
• Understanding of vulnerability management concepts, including CVEs, CVSS scoring, remediation, risk prioritization, vulnerability exceptions, and remediation SLAs.
• Understanding of configuration security benchmarks and standards such as CIS Benchmarks or NIST guidance.
• Experience with ServiceNow Discovery, Service Graph Connectors, or other CMDB data sources.
• Experience with DevOps/CI-CD practices for ServiceNow development.
• Experience operating ServiceNow in a large, highly regulated enterprise environment.
• ServiceNow Certified System Administrator (CSA) certification.
• ServiceNow Certified Application Developer (CAD) certification.
• Relevant ServiceNow Security Operations or Vulnerability Response implementation certification or accreditation.
• Security certifications such as Security+ or CISSP.

Responsibilities

• Design, configure, develop, and enhance ServiceNow Vulnerability Response capabilities.
• Develop workflows for vulnerability ingestion, normalization, prioritization, assignment, remediation, exception management, and closure.
• Configure and customize vulnerability-related records, business rules, Script Includes, UI policies, client scripts, Flow Designer flows, scheduled jobs, notifications, and other platform components.
• Integrate ServiceNow with vulnerability scanning and security platforms using REST APIs, IntegrationHub, MID Servers, and other supported mechanisms.
• Automate vulnerability assignment, remediation orchestration, exception handling, and operational reporting.
• Troubleshoot data ingestion, reconciliation, CI matching, assignment, integration, and high-volume data-processing issues.
• Design and implement ServiceNow Configuration Compliance capabilities and workflows to ingest, evaluate, route, track, and remediate findings.
• Automate compliance-finding assignment based on CI ownership, support groups, infrastructure responsibility, and defined business rules.
• Support configuration compliance exception and remediation workflows; translate security and infrastructure control requirements into sustainable technical solutions.
• Develop dashboards and reports showing compliance findings, remediation status, exceptions, and aging.
• Ensure VR and Configuration Compliance solutions leverage CMDB data and CI relationships appropriately.
• Develop and troubleshoot CI matching and reconciliation logic; identify and remediate data-quality issues affecting routing or ownership.
• Partner with CMDB and Discovery teams to improve CI identification and data quality.
• Develop maintainable ServiceNow solutions using JavaScript, Glide APIs, Script Includes, Business Rules, UI Actions, Client Scripts, ACLs, and scheduled processing.
• Build automation using Flow Designer, IntegrationHub, REST/SOAP APIs, and MID Server integrations.
• Design solutions aligned with ServiceNow architecture and upgradeability principles, minimizing unnecessary customization.
• Perform technical design reviews and develop reusable components and integration patterns.
• Troubleshoot complex application, integration, data, performance, and production issues.
• Develop automated tests using ServiceNow Automated Test Framework (ATF), where appropriate.
• Support platform upgrades, patches, regression testing, release validation, and production deployments.
• Maintain technical documentation, solution designs, configuration documentation, and operational support procedures.
• Provide senior technical guidance for Vulnerability Response and Configuration Compliance and translate cybersecurity requirements into scalable designs.
• Conduct code reviews and promote ServiceNow development standards.
• Collaborate with architects, security and infrastructure teams, product owners, and external implementation partners.
• Evaluate technical debt and recommend replacing customizations with supported platform functionality.
• Participate in architecture, design, release-readiness, and production-support reviews.

Benefits

• Retirement benefits, including 401(k) and pension.
• Health and welfare benefits, including medical, dental, vision, spending accounts, and disability benefits.
• Paid time off.
• Parental and caregiver leave.
• Life and accident insurance.
• Other voluntary and well-being benefits.
• Discretionary bonus program that may include an equity component.
• Flexible and collaborative work culture.
• Movement within the organization is encouraged.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed