GuidePoint Security LLC
More roles at GuidePoint Security LLCVulnerability Management Engineer (ServiceNow) - Mid-Atlantic region (Remote)
Remote role where the employee must remain based in a particular country.
Listed for United States
Source: the job board's country tag. The advert itself does not name United States.
Employer listed it 12 days ago · Added 4 weeks ago
Been open since 4 weeks ago, still being checked, but it has been live a while.
Salary
Not stated
Location
Listed for United States
Timezone
Not stated
Contract
Full-time
Experience
Mid
Category
Software
The employer did not publish a salary, and we have too few comparable roles to estimate one.
What the advert says
Quoted word for word from the employer's advert. Where it says nothing, we say so.
- Working hours
- Not mentioned in the advert
- Where you can work from
Note : Applicants must be authorized to work for any employer in the U.S.
- Contract
- Not mentioned in the advert
- Experience asked for
At least 1-2+ years of experience in ServiceNow Security Operations and CMDB implementation and integration.
- Pay
If you choose the High Deductible / HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per EE annually / $1750 per family annually (includes spouse/children/family options)
Remote flexibility
Work from home
This is a remote role, but the employee must be based in United States. It is work from home rather than work from anywhere.
What the employer says
- Source listing states candidate location: "Remote, Mid-Atlantic"
- Job description states: "U.S. based"
What Nomaders makes of it
- Payroll and tax are likely handled in that country only
The quotes above are the employer's own words; the reading is ours. Always check the original listing and employment terms before working from another country.
Before you apply
Experience: employer states
Written as a requirement
- “Required Experience and Education:”
- “At least 1-2+ years of experience in ServiceNow Security Operations and CMDB implementation and integration.”
Written as a nice-to-have
- “Preferred Experience and Education”
Questions worth asking: Nomaders interpretation
- The advert does not say whether this is employment or a contractor arrangement. Ask, as it affects tax and benefits.
Produced automatically from this advert's text; not reviewed by a person. The employer's own page is the final word.
About the role
GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.
General Description
We are looking for a Vulnerability Management Engineer - ServiceNow to support GuidePoint Security's Mid-Atlantic Exposure Management practice by designing, building, and operating the ServiceNow Security Operations and Vulnerability Response (VR) capabilities that power our clients' vulnerability and exposure management programs. This role will engage in the development of automated vulnerability lifecycle workflows, security tool integrations, and risk-based remediation processes while providing “Wow Them” service to clients and/or internal customers or co-workers.
The Vulnerability Management Engineer - ServiceNow will be required to demonstrate strong ServiceNow Security Operations engineering, scripting, and integration skills, lead by influence, and strong business/financial acumen to drive the use of progressive vulnerability response and exposure management programs that will align the delivery of business objectives and priorities.
About the Mid-Atlantic Exposure Management Practice
The Mid-Atlantic Exposure Management Practice is responsible for helping clients continuously identify, prioritize, and remediate the vulnerabilities and exposures that pose the greatest risk to their business. We design, implement, and operate the platforms and automation — with ServiceNow Security Operations at the center — that turn raw scanner output into governed, measurable, and business-aware remediation across the organization.
Our team of ServiceNow Security Operations engineers, vulnerability management specialists, and automation developers focuses on Vulnerability Response, Security Operations, and exposure management — using CMDB/ITOM asset context, risk-based prioritization, and Flow Designer automation. We partner with client security, infrastructure, and application teams to shrink remediation timelines, improve SLA adherence, and demonstrate real risk reduction.
Key focus areas of the practice:
Building and tuning ServiceNow Vulnerability Response and Security Operations workflows
Integrating scanners and threat intelligence (Qualys, Tenable, Rapid7, Defender, CrowdStrike) into a unified remediation pipeline
Enabling risk-based, asset-aware prioritization using CMDB, Discovery, and Service Mapping
Roles and Responsibilities:
ServiceNow Vulnerability Response (VR) Engineering
Design, configure, and support ServiceNow Vulnerability Response (VR) to manage the end-to-end vulnerability lifecycle — from ingestion and de-duplication through assignment, remediation, exception handling, and closure.
Build and maintain remediation workflows, vulnerability groups, assignment rules, and calculators using Flow Designer, Business Rules, and other ServiceNow technologies.
Configure risk scoring and prioritization models that combine CVSS, threat intelligence, exploitability, and business/asset criticality to drive risk-based remediation.
Develop custom automation and workflows using JavaScript, HTML/CSS, Python, and ServiceNow platform capabilities to reduce manual triage effort.
ServiceNow Security Operations
Configure and maintain the ServiceNow Security Operations suite, including Vulnerability Response and, where in scope, Security Incident Response (SIR) and Configuration Compliance.
Manage the vulnerability lifecycle end-to-end: intake, correlation, prioritization, remediation tracking, verification, and reporting.
Conduct vulnerability analysis and prioritization, coordinating remediation with client infrastructure, security, and application teams.
Design and maintain ServiceNow Security Operations dashboards, KPIs, and SLA monitoring to give security leadership visibility into remediation performance and risk posture.
Integrations & Automation
Configure and manage vulnerability scanning and security tool integrations via APIs — including Qualys, Tenable, Rapid7, Microsoft Defender, and CrowdStrike — and normalize their data into ServiceNow.
Requirements
- ·Excellent communication, documentation and collaboration skills.
- ·Certification in one or more of the following:
- ·ServiceNow Certified System Administrator
- ·ServiceNow Certified Application Developer
- ·ServiceNow Certified Application Specialist
Benefits
No benefits package published with this listing. Ask about it at first interview.
How to apply
- 1Check the flexibility label above, work from home, matches where you plan to live and work.
- 2Tailor your CV to the role at GuidePoint Security LLC, mentioning your remote working experience.
- 3Apply directly on the employer's careers page using the button below. Nomaders never handles your application.
Found 27d ago. Last checked today. Always confirm the details on the original posting, salary and location can change after publication.
Listing sourced from Company boards.
Similar roles
Other open software roles with comparable remote rules.
Browse all open rolesPay not stated · You'll be taken to the employer's careers page.