Remote Threat Intelligence Jobs in Raleigh, NC (NOW HIRING)

Job Overview:

Pay Range: $57hr - $62hr

Requirement/Must Have:

• Active CIS-SecOps Certification.
• 1+ years of hands-on experience in ServiceNow Security Operations (SecOps) implementation and development.
• Strong hands-on development experience on the ServiceNow platform.
• Mandatory implementation experience in ServiceNow SecOps.
• Expertise in Security Incident Response (SIR), Vulnerability Response (VR), Threat Intelligence, and Security Posture Control.
• Strong knowledge of JavaScript, Glide APIs, Business Rules, Client Scripts, Script Includes, ACLs, Flow Designer, and Integration Hub.
• Experience integrating ServiceNow with enterprise security and SIEM tools.
• Strong understanding of Cyber Security Operations, Vulnerability Management, Incident Response, Threat Intelligence, and Security Compliance.
• Knowledge of security frameworks and standards such as NIST, ISO 27001, CIS Controls, MITRE ATT&CK, and SOC Framework.
• Experience with CMDB, Discovery, and Service Mapping concepts.
• Understanding of ServiceNow data model and platform architecture.
• Experience in troubleshooting, debugging, and performance optimization.
• Strong communication and stakeholder management skills.
• Ability to communicate effectively with stakeholders.

Responsibilities:

• Design, develop, and implement ServiceNow Security Operations (SecOps) solutions based on business and security requirements.
• Configure and customize SecOps modules, including Security Incident Response (SIR), Vulnerability Response (VR), Threat Intelligence, Configuration Compliance, and Security Posture Control (SPC).
• Develop and maintain Business Rules, Client Scripts, UI Policies, Script Includes, Flow Designer / Workflow configurations, Notifications, and Security Workflows.
• Configure and automate security incident lifecycle management.
• Implement vulnerability management processes, remediation workflows, and exception management.
• Integrate ServiceNow SecOps with security tools such as Microsoft Defender, Sentinel, CrowdStrike, Qualys, Tenable, Rapid7, Splunk, and QRadar.
• Develop REST/SOAP integrations and leverage IntegrationHub spokes.
• Collaborate with Cyber Security, SOC, GRC, Infrastructure, and Operations teams to implement security use cases.
• Support threat intelligence ingestion, enrichment, and correlation activities.
• Design security orchestration and automation workflows.
• Participate in security workshops, requirement gathering, and solution design discussions.
• Perform unit testing, SIT, UAT, deployment, and post-production support.
• Maintain technical documentation, knowledge articles, and solution design documents.
• Ensure compliance with ServiceNow best practices, security standards, and delivery methodologies.

Nice to Have:

• Experience implementing Security Incident Response and Vulnerability Response modules.
• Experience integrating Microsoft Sentinel, Defender XDR, CrowdStrike, Qualys, Rapid7, Tenable, Splunk, and QRadar.
• Experience in Security Orchestration, Automation, and Response (SOAR) use cases.
• Experience with CMDB, Discovery, Service Mapping, and asset context integration.
• Experience implementing risk-based vulnerability prioritization.
• Experience developing custom integrations and security workflows.
• Experience in Agile/Scrum delivery methodology.
• Experience working with global SOC and Cyber Security teams.

• Medical, Dental, and Vision Insurance
• 401(k) Retirement Plan
• Health Savings Account (HSA)
• Disability Insurance (Short-Term and Long-Term)
• Life and AD&D Insurance
• Paid Sick Leave (where required by applicable state or local law)
• Supplemental Insurance Plans
• Identity Theft Protection
• Pet Insurance
• Employee Wellness Programs
• Employee Assistance Program (EAP)
• Career Growth and Professional Development Opportunities