TECHNICAL LEAD - ServiceNow

Job description

**Mandate : CAD and CIS-SIR/SecOps-related CIS-certifications.** - **It will be 3 days? work from office****.** - **Regular shifts basis the business need** - As a **Consultant / Senior Consultant**, you would be expected to perform the following activities: - Well versed with the application deployment and configuration baselines, and understanding of how the application environment operates in a secure environment and how exceptions are handled during operations. - Facilitate use of technology-based tools or methodologies to continuously improve the monitoring, management, and reliability of the service. - Define the architecture and design elements for the implementation of **ServiceNow SecOps solution** including design data/object models, technical workflow diagrams, access control models, and integration patterns. - Understand the business requirement and define & document epics, user stories, create UI mock-ups, and have a roll-up-the-sleeves approach to make things happen. - Facilitate ServiceNow training and support teams on complex system configuration. - Collaborate with clients to resolve business problems by translating functional requirements into technical solutions. - Be responsible for end-to-end application design, workflow configurations, and customizations. - Demonstrate good judgment and a pragmatic approach to delivering a solution that optimizes architecture activities across company needs, business constraints, and technological realities. - **Key Responsibilities (Security Incident Response)** - ?       Configure and administer ServiceNow Security Incident Response including security incident categories, playbooks, assignment rules, severity/priority models, SLAs, notifications, and response tasking. - ?       Design and support incident intake and triage workflows from multiple security sources such as SIEM, SOAR, threat intelligence, email security, EDR/XDR, vulnerability tools, and manual submissions. - ?       Integrate and maintain ingestion from security tools into the ServiceNow SIR application and validate data mapping, transformation logic, schedules, deduplication, and error handling. - ?       Build and maintain automations using Flow Designer / Integration Hub for enrichment, routing, approvals, escalations, containment support, evidence gathering, and closure activities. - ?       Configure incident lifecycle processes covering detection, analysis, triage, investigation, containment, eradication, recovery, and post-incident review. - ?       Partner with SOC, IR, IT Ops, app owners, and resolver groups to coordinate response workflows, manage dependencies, and ensure timely incident remediation. - ?       Define and publish dashboards / KPIs in ServiceNow for incident aging, MTTA, MTTR, SLA compliance, incident trends, severity distribution, and analyst workload. - ?       Support governance through audit-ready evidence, documentation, runbooks, access controls, and change / release management. - ?       Enable linkage between security incidents, vulnerable items, change records, problems, and CMDB CIs to improve traceability and operational response. - ?       Support development of response playbooks and standard operating procedures aligned to enterprise incident management and cyber response requirements. - **Optional Responsibilities (Vulnerability Response)** - Support integration points between Vulnerability Response and SIR, including creation of security incidents from exploited or high-risk vulnerabilities when needed. - **Required Qualifications** - 3-10 years of ServiceNow experience (Admin/Developer/Platform). - Hands-on experience implementing or operating **ServiceNow Security Incident Response**. - ?       Strong understanding of the security incident management lifecycle and SOC / IR operating processes. - ?       Experience with CMDB / asset data concepts and how they affect SIR accuracy, ownership, prioritization, and routing. - ?       Working knowledge of integrations (REST / API; MID Server where applicable) and automation (Flow Designer). - ?       Understanding incident prioritization, case handling, escalation models, and response coordination across stakeholders. - **Preferred / Nice to Have** - ServiceNow **CSA (Mandatory), CAD** and CIS-SIR/SecOps-related **CIS**-certifications. - Experience integrating ServiceNow with SIEM / SOAR / EDR platforms. - Scripting (ServiceNow JavaScript), performance tuning, and large-scale data ingestion. - **Core Skills** - ServiceNow SIR, SecOps, CMDB, Flow Designer / Integration Hub, integrations, reporting / dashboards, security incident lifecycle, stakeholder coordination, communication, and presentation. - **Education:** - ?        Bachelor?s/ Master?s degree in information technology or related field - **Location:** - Bengaluru/Hyderabad/Pune/Chennai/Kolkata/Delhi/Mumbai