ServiceNow Security Incident Response SME

Precision Solutions - Washington, DC

Full-time - Senior

Washington, DC

Professional, Scientific, and Technical Services

About the position

The ServiceNow Security Incident Response Subject Matter Expert (SME) plays a crucial role in implementing, managing, and optimizing the ServiceNow Security Operations suite, particularly the Security Incident Response module. This position requires deep expertise in ServiceNow functionality and a strong understanding of cybersecurity frameworks, with a focus on enhancing incident response capabilities in a collaborative environment.

Responsibilities

• Configure, customize, and manage the ServiceNow Security Incident Response (SIR) module, leveraging out-of-the-box features and tailored integrations.
• Collaborate with stakeholders to gather, document, and validate technical and functional requirements, ensuring alignment with business objectives.
• Develop and manage ServiceNow workflows, notifications, and integrations with external tools, including SIEM systems and threat intelligence platforms.
• Facilitate client meetings, document action items, and ensure follow-through on deliverables to meet project goals.
• Create and maintain project plans, schedules, and documentation, tracking progress against milestones and deliverables.
• Act as a liaison between technical teams and stakeholders to provide clear communication and ensure alignment on priorities.
• Analyze incidents and metrics to identify trends, recommend improvements, and support cybersecurity initiatives.
• Develop detailed reports and documentation, including incident summaries, system roadmaps, and user guides.

Requirements

• 10+ years of relatable Incident Response experience is required.
• Proficiency in ServiceNow Security Incident Response (SIR) module, including out-of-the-box (OOB) features and functionality.
• Experience in configuring and customizing ServiceNow applications, specifically within the Security Operations suite.
• Understanding of ServiceNow workflows, notifications, and integrations (e.g., SIEM tools, threat intelligence platforms, or incident response tools).
• Strong ability to elicit, document, and validate technical and functional requirements.
• Familiarity with engaging diverse stakeholders to refine and prioritize requirements.
• Experience with project planning and management tools (e.g., MS Project, Jira, or ServiceNow Project Portfolio Management).
• Ability to create and maintain deliverable schedules, manage project milestones, and track progress.
• Proficiency in developing status reports and maintaining project documentation.
• Skill in acting as a liaison between technical teams and government stakeholders to ensure alignment.
• Experience in facilitating meetings, documenting follow-ups, and driving decision-making processes.
• Ability to provide tailored support, including ad hoc troubleshooting and guidance based on client needs.
• Knowledge of incident response processes and cybersecurity frameworks (e.g., NIST CSF, NIST SP 800-61, or ISO 27001).
• Understanding of threat intelligence and vulnerability management as they relate to SIR.

Nice-to-haves

• A Bachelor's degree is highly preferred, but not required.
• Familiarity with integrating ServiceNow with external systems and tools (e.g., email, Active Directory, or cloud services).
• Understanding of APIs and web services (REST/SOAP) for interoperability.
• Proficiency in creating technical and functional documentation, including user guides and implementation roadmaps.
• Ability to produce detailed reports summarizing incidents, risks, and remediation efforts.
• Capability to analyze incidents and metrics to recommend system improvements.
• Strong troubleshooting skills to identify and resolve configuration or integration issues.
• Adaptability to handle unstructured tasks and shifting priorities.
• Strong interpersonal skills for stakeholder engagement and collaboration.
• Excellent organizational skills to manage competing demands and track deliverables effectively.