Triangle Cyber is seeking a highly skilled and motivated ServiceNow Business Process Consultant/Developer to join our team for a federal contract engagement.  This role combines ServiceNow SecOps development, integration engineering, and process consulting. The ideal candidate will work directly with security stakeholders, translate mission requirements into technical designs, and deliver scalable, secure, and automated SecOps capabilities within the ServiceNow platform.

Key Responsibilities

• Designing, prototyping, and implementing ServiceNow SecOps applications, including:
  • Security Incident Response (SIR): enrichment, correlation rules, and automated playbooks.
  • Vulnerability Response (VR): scanner integrations, remediation workflows, patch group automation.
  • Configuration Compliance (CC): policy exception handling, remediation tasks, compliance dashboards.
  • Threat Intelligence (TI): ingestion of IOCs, sightings search, enrichment workflows.
• Supporting the customer’s roadmap for Splunk integrations to enable alert ingestion, bi-directional incident synchronization, and SIEM dashboards.
• Developing custom integrations with SIEM, scanner, and intel tools (e.g., Splunk, Tenable, VirusTotal, Hybrid Analysis) using IntegrationHub, REST/SOAP APIs, and MID Server.
• Building and maintaining orchestration playbooks, Flow Designer workflows, Business Rules, and Script Includes to automate enrichment and response actions.
• Documenting and maintaining policies, procedures, and technical designs aligned with Agile development practices and secure coding standards.
• Leading workshops with SOC, IR, and VR teams to capture mission needs, define business requirements, and translate them into technical solutions.
• Creating and maintaining Performance Analytics dashboards and KPIs to provide real-time visibility into security posture.
• Supporting incident resolution, troubleshooting, and sustainment of the ServiceNow SecOps environment.
• Providing mentorship and knowledge transfer to client staff on best practices and solution sustainment.
• Able to communicate project progress, technical challenges, and solutions to both technical and non-technical stakeholders.

Required Qualifications

• Must be a U.S. citizen with an active Secret clearance.
• Must have a Bachelor's degree or higher in Cybersecurity, Computer Science, Software Engineering, Systems Engineering, or a related discipline
  • In lieu of a degree: an additional 10 years of directly relevant work experience (for a total of 18+ years) may be substituted.
• Must have an active ServiceNow certification:
  • ServiceNow Certified System Administrator (CSA).
  • ServiceNow Certified Application Developer (CAD)
  • ServiceNow Certified Implementation Specialist (CIS), SecOps (SIR, VR, or CC).
• Must have a minimum of 8 years of software development, IT security, or IT systems engineering experience.
• Must have a minimum of 4 years of ServiceNow experience
• Must have a minimum of 2 years of ServiceNow experience focused on SecOps applications (SIR, VR, CC, or TI).
• Must have a strong knowledge of ServiceNow administration, advanced configuration, and custom application development.
• Must have experience integrating ServiceNow with SIEM, vulnerability scanners, and threat intelligence platforms.
• Must have hands-on experience with Flow Designer, Orchestration, IntegrationHub, and MID Server.
• Must have strong technical skills in web technologies (JavaScript, HTML, XML, Angular, CSS) and integration technologies (REST, SOAP, LDAP, SSO).
• Must demonstrate familiarity with federal cybersecurity frameworks (NIST 800-53, FedRAMP, CISA KEV, MITRE ATT&CK).
• Must have strong communication, presentation, and documentation skills for engagements with technical and business stakeholders.

Desired Qualifications

•  Experience supporting DHS, DoD, or Intelligence Community customers.
• Experience deploying future-state SecOps processes including incident triage, vulnerability management, compliance automation, and threat intel workflows.
• Familiarity with Splunk use cases for security operations and event correlation.
• Experience with collaboration tools (MS Teams, Outlook, SharePoint, Atlassian Jira/Confluence).
• Strong problem-solving, analytical, and consulting skills in complex security environments.ITIL v4 Foundation certification (or willingness to complete within one year)
• DoD 8570.1-M Compliance at IAT Level I (e.g., Certified Information Systems Security Professional (CISSP)) certification is highly desired
• Information Systems Security Engineering Professional (ISSEP) or Information System Security Architect Professional (ISSAP) certification desired.