Vulnerability Management Engineer (ServiceNow) - Mid-Atlantic region (Remote)

The role

The Vulnerability Management Engineer will design, build, and operate ServiceNow Security Operations and Vulnerability Response capabilities. This role involves developing automated workflows, security tool integrations, and risk-based remediation processes for the Mid-Atlantic Exposure Management practice.

What you will do

• Design, configure, and support ServiceNow Vulnerability Response to manage the vulnerability lifecycle.
• Build and maintain remediation workflows, vulnerability groups, assignment rules, and calculators using Flow Designer and Business Rules.
• Configure risk scoring and prioritization models using CVSS, threat intelligence, and asset criticality.
• Develop custom automation and workflows using JavaScript, HTML/CSS, and Python.
• Configure and maintain the ServiceNow Security Operations suite including Vulnerability Response, Security Incident Response, and Configuration Compliance.
• Manage the vulnerability lifecycle including intake, correlation, prioritization, remediation tracking, and reporting.
• Configure and manage vulnerability scanning and security tool integrations via APIs.
• Integrate threat intelligence and asset data sources to enrich findings.
• Leverage CMDB, Discovery, and Service Mapping to establish asset intelligence.
• Provide operational support including incident support, root cause investigations, and process optimization.

Required qualifications

• At least 1-2+ years of experience in ServiceNow Security Operations and CMDB implementation and integration.
• Hands-on experience configuring ServiceNow Vulnerability Response (VR) and Security Operations, including Flow Designer and workflow configuration.
• Experience integrating vulnerability scanners and security tools (e.g., Qualys, Tenable, Rapid7, Microsoft Defender, CrowdStrike) with ServiceNow via APIs.
• Working knowledge of vulnerability management concepts — CVSS, risk assessment, exploitability, and SLA-driven remediation.
• Understanding of ITOM concepts — CMDB, Discovery, and Service Mapping.
• Strong programming skills in Python, JavaScript, HTML/CSS, and other ServiceNow technologies.
• Sedentary work.
• Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day.
• Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day.

Nice to have

• Bachelor's degree in computer science, Information Systems, or a related field
• Basic understanding of vulnerability management and security operations processes and procedures.
• Experience with exposure management / risk-based vulnerability management (RBVM) and prioritizing findings by business impact.
• Familiarity with threat intelligence enrichment and Security Incident Response (SIR) workflows.
• Experience building executive-ready dashboards, KPIs, and SLA/compliance reporting in ServiceNow.
• Strong problem-solving and analytical skills.
• Excellent communication, documentation and collaboration skills.
• ServiceNow Certified System Administrator
• ServiceNow Certified Application Developer
• ServiceNow Certified Application Specialist

Benefits

• Group Medical Insurance options: Zero Deductible PPO Plan or High Deductible Health Plan with HSA
• Group Dental Insurance
• 12 corporate holidays
• Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Before you apply

• Applicants must be authorized to work for any employer in the U.S.
• Unable to sponsor or take over sponsorship of an employment visa for this role.

About the company

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. It is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security.