ServiceNow Developer (SIR)

Seamless Migration

1d•Remote

About The Position

Seamless Migration is seeking a career- and customer-oriented ServiceNow Security Incident Response (SIR) Developer to design, develop, configure, and enhance ServiceNow SIR solutions for enterprise cybersecurity incident response and case management. The role customizes ServiceNow forms, tables, scripts, and reusable components, and enhances Security Operations Workspaces using UI Builder. The developer automates incident intake, classification, routing, investigation, remediation, and closure using Flow Designer, IntegrationHub, and playbooks. The position develops and maintains integrations with SIEM platforms, Microsoft services, and enterprise applications; configures incident correlation and security alert ingestion; and builds dashboards and Performance Analytics indicators. It also implements access controls, secure evidence handling, audit tracking, and data retention requirements; performs testing and troubleshooting; and maintains technical documentation, configuration specifications, and development standards. The position is remote in the United States. Candidates must be U.S. citizens with no dual citizenship.

Requirements

Strong hands-on experience developing and configuring applications on the ServiceNow platform.
Proficiency in ServiceNow scripting, including JavaScript, GlideRecord, Script Includes, Business Rules, Client Scripts, and UI Policies.
Experience developing workflows and automation using ServiceNow Flow Designer.
Experience configuring ServiceNow forms, tables, workflows, task management, and custom applications.
Experience developing REST API integrations using ServiceNow REST Messages, Scripted REST APIs, or IntegrationHub.
Experience working with ServiceNow Access Control Lists (ACLs), roles, and application security.
Familiarity with ServiceNow Workspaces, UI Builder, or configurable workspace development.
Understanding of incident management processes, workflow automation, and enterprise case management.
Experience troubleshooting ServiceNow scripts, integrations, workflows, and application functionality.
Ability to translate technical and business requirements into ServiceNow configurations and custom solutions.
Experience working in Agile development environments.
U.S. citizenship with no dual citizenship.

Nice To Haves

Direct experience implementing or developing ServiceNow Security Incident Response (SIR).
Experience with ServiceNow Security Operations (SecOps), including Security Incident Response and Vulnerability Response (VR).
Experience configuring SIR playbooks, security incident lifecycles, investigation tasks, and remediation workflows.
Familiarity with Security Operations Center (SOC) operations and cybersecurity incident response processes.
Experience integrating ServiceNow with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or similar technologies.
Experience with ServiceNow IntegrationHub, MID Servers, import sets, and transform maps.
Experience developing integrations with Microsoft Graph API, Active Directory, LDAP, or PKI.
Experience with ServiceNow Performance Analytics, dashboards, and operational reporting.
Understanding of security incident classification, indicators of compromise, and incident correlation.
Experience developing ServiceNow applications in secure federal government environments.
ServiceNow certifications such as Certified System Administrator (CSA), Certified Application Developer (CAD), or relevant Certified Implementation Specialist (CIS) certifications.

Responsibilities

Design, develop, configure, and enhance ServiceNow SIR solutions for enterprise cybersecurity incident response and case management.
Customize ServiceNow forms, tables, scripts, and reusable components, and enhance Security Operations Workspaces using UI Builder.
Automate incident intake, classification, routing, investigation, remediation, and closure using Flow Designer, IntegrationHub, and playbooks.
Develop and maintain integrations with SIEM platforms, Microsoft services, and enterprise applications using REST APIs, Scripted REST APIs, IntegrationHub, and MID Servers where applicable.
Configure incident correlation and automate security alert ingestion and incident data synchronization across systems.
Build dashboards, reports, and Performance Analytics indicators to track incident severity, response times, remediation, and team performance.
Implement access controls, secure evidence handling, audit tracking, and data retention requirements.
Perform unit, integration, and user acceptance testing; troubleshoot application, workflow, and integration issues.
Maintain technical documentation, configuration specifications, and development standards.
Translate technical and business requirements into ServiceNow configurations and custom solutions.