Security Operations Specialist

Job Title: Security Operations Implementation Specialist

Location:

Onsite / Remote / Hybrid

Experience Required:

5+ years in security operations with at least 3 years focused on vulnerability response and security incident response.

Certifications Required:

• ServiceNow Certified System Administrator (CSA)
• ServiceNow Certified Implementation Specialist – Security Incident Response
• ServiceNow Certified Implementation Specialist – Vulnerability Response
• ITIL v4 Foundation(Optional)

Job Summary:

Seeking a skilled and certified security operations implementation specialist to lead and support implementations of vulnerability response and security incident response for clients. Ideal candidate will have expertise in security operations architecture, integrations with threat intelligence and vulnerability scanning tools, and a track record of successful deployments in complex enterprise environments.

Key Responsibilities:

1. Implementation & Configuration

• Lead end-to-end implementation of security operations modules – VR and SIR
• Configure and customize workflows, playbooks, data imports, dashboards, and business rules for VR/SIR
• Implement threat intelligence integrations and vulnerability scanner integrations
• Build use-case-specific automation using Flow Designer or Security Orchestration (SOAR)

2. Requirements Gathering & Design

• Collaborate with cybersecurity teams, risk & compliance, and IT operations to gather detailed requirements
• Translate business requirements into technical specifications and implementation plans

3. Integration & Automation

• Integrate security operations with external tools such as SIEMs, CMDB, scanners, threat intel platforms, and ticketing systems
• Develop orchestration and remediation workflows for auto-assignment, enrichment, escalation, and resolution

4. Testing & Deployment

• Perform UAT, defect resolution, and cutover activities
• Ensure system performance, scalability, and security compliance during deployment

5. Documentation & Training

• Create solution design documents, implementation runbooks, and end-user training materials
• Conduct knowledge transfer and handover sessions for clients and internal teams

Required Skills and Qualifications:

• Strong knowledge of security operations architecture, data models, and module interdependencies
• Proven experience with at least 2 full lifecycle implementations of VR and SIR
• Experience integrating security operations with security tools (Tenable, Qualys, Rapid7, Splunk, Azure Sentinel, etc.)
• Hands-on scripting experience (JavaScript, Glide API)
• Familiarity with MITRE ATT&CK, NIST, and SOC operations
• Strong troubleshooting, debugging, and performance tuning skills
• Excellent client communication and stakeholder management skills

Nice to Have:

• Experience with Security Orchestration, Automation and Response (SOAR) in ServiceNow
• Experience with GRC/IRM module as an added advantage
• Experience in multi-org/global deployments and domain separation in ServiceNow
• Understanding of vulnerability lifecycle management and incident triage frameworks

Keyword: CybersecuritySpecialist