Assess the existing ServiceNow SecOps implementation and its integration within the broader ITSM environment.

Configure and optimize the ServiceNow Security Incident Response (SIR) and Vulnerability Response (VR) modules to enable automated triage, prioritization, and remediation workflows.

Develop and formalize security incident handling and vulnerability response processes in alignment with recognized industry standards (e.g., NIST 800-61, ISO/IEC 27035, CIS Controls).

Integrate external data sources such as vulnerability scanners (e.g. Qualys, Tenable), threat intelligence platforms, and SIEM systems (e.g. Splunk).

Design and implement performance metrics, dashboards, and reports to monitor Service Level Objectives (SLOs), Mean Time to Respond (MTTR), and remediation compliance.

Provide documentation, governance recommendations, and knowledge transfer to ensure sustainable operational capability.

B2 level of English minimum. Any knowledge of French is an asset.

4 years of studies + at least 9 years of professional experience OR 3 years of studies + at least 10 years of professional experience .

A minimum of 5 years of proven hands-on experience with ServiceNow Security Operations modules, specifically SIR and VR.

A minimum of 5 years of experience in implementing automated remediation workflows through IntegrationHub, Flow Designer, or custom scripting

Excellent knowledge of ServiceNow Security Operations modules, specifically SIR and VR.

Excellent knowledge on ServiceNow platform build skills (Workflow Studio/Flow Designer, data modelling, integrations):

Proficiency with Flow Designer and subflows in Workflow Studio for automating triage, enrichment, tasking, and handoffs across SecOps and ITSM.

Modelling data and relationships used by SIR and VR (incidents, indicators, affected CIs, vulnerable items, groups, exception records) to support automation, reporting, and Performance Analytics.

Integration design using out of the box connectors and custom actions for email, ticketing, collaboration, and security tools, including scanner and threat intel feeds.

Understanding of ServiceNow CMDB and its role in correlation of vulnerabilities and security incidents.

Certification: ServiceNow System Administrator and/or ServiceNow Security Operations Certified Implementation Specialist

English

ServiceNow Security Operations

IntegrationHub

FlowDesigner

Our client within the European Institutions is currently looking for an ICT Security Incident Handling & Vulnerability Management ServiceNow Specialist to work on the assessment on the existing ServiceNow SecOps implementation and its integration within the broader ITSM environment.

Public

Security ServiceNow Specialist

€360

Location:

The Hague, Netherlands (the)

Apply before:

21/11/2025

Project summary

Languages needed

Main skills

Project description

Send application