ServiceNow SecOps Business Process

BCMC is supporting a U.S. Government customer on a mission-critical cyber operations program.

We are seeking a ServiceNow SecOps Business Process / Technical Consultant to design, develop, and implement ServiceNow Security Operations (SecOps) solutions that enhance the customer's ability to detect, respond, and remediate security threats.

• Designing, prototyping, and implementing ServiceNow SecOps applications, including:
• Security Incident Response (SIR): enrichment, correlation rules, and automated playbooks.
• Vulnerability Response (VR): scanner integrations, remediation workflows, patch group automation.
• Configuration Compliance (CC): policy exception handling, remediation tasks, compliance dashboards.
• Threat Intelligence (TI): ingestion of IOCs, sightings search, enrichment workflows.
• Supporting the customer's roadmap for Splunk integrations to enable alert ingestion, bi-directional incident synchronization, and SIEM dashboards.
• Developing custom integrations with SIEM, scanner, and intel tools (e.g., Splunk, Tenable, VirusTotal, Hybrid Analysis) using IntegrationHub, REST/SOAP APIs, and MID Server.
• Building and maintaining orchestration playbooks, Flow Designer workflows, Business Rules, and Script Includes to automate enrichment and response actions.
• Documenting and maintaining policies, procedures, and technical designs aligned with Agile development practices and secure coding standards.
• Leading workshops with SOC, IR, and VR teams to capture mission needs, define business requirements, and translate them into technical solutions.
• Creating and maintaining Performance Analytics dashboards and KPIs to provide real-time visibility into security posture.
• Supporting incident resolution, troubleshooting, and sustainment of the ServiceNow SecOps environment.
• Providing mentorship and knowledge transfer to client staff on best practices and solution sustainment.