Cyber Security Consultant

Location-Noida/Banglore/Mumbai(Hybrid)

About the Role

We are seeking a highly skilled Cybersecurity Consultant with expertise in ServiceNow Security Operations (SecOps) to design, implement, and optimize enterprise cybersecurity solutions on the ServiceNow platform. The ideal candidate will have hands-on experience delivering Security Operations capabilities, integrating ServiceNow with enterprise security tools, and enabling organizations to automate and strengthen their security operations.

As a trusted consultant, you will collaborate with cross-functional teams, understand business and security requirements, and deliver scalable, high-quality solutions that enhance an organization's cybersecurity posture.

Key Responsibilities

ServiceNow Security Operations

• Design, configure, and implement ServiceNow Security Operations (SecOps) solutions, including:
• Vulnerability Response (VR)
• Security Incident Response (SIR)
• Threat Intelligence (TI)
• Configure and customize SecOps applications to align with business and security requirements.
• Develop scalable workflows, automation, and orchestration using Flow Designer, IntegrationHub, and platform capabilities.
• Configure Business Rules, Client Scripts, Script Includes, UI Policies, ACLs, Notifications, and Catalog components where applicable.

Integration & Automation

• Integrate ServiceNow with enterprise security technologies, including:
• SIEM platforms
• Vulnerability Management solutions
• Endpoint Detection & Response (EDR)
• Identity & Access Management (IAM)
• SOAR platforms
• Develop and maintain integrations using REST/SOAP APIs and IntegrationHub Spokes.
• Enable automated security response and incident remediation workflows.

Solution Delivery

• Gather and analyze business, functional, and technical requirements.
• Prepare solution designs and technical documentation.
• Participate in solution architecture discussions and recommend industry best practices.
• Support development, testing, deployment, and post-production stabilization.
• Perform platform troubleshooting, root cause analysis, and performance optimization.

Stakeholder Collaboration

• Work closely with Cybersecurity, Infrastructure, IT Operations, and Application teams.
• Participate in Agile ceremonies and contribute to sprint planning, estimation, and delivery.
• Provide technical guidance during implementation and support activities.
• Ensure adherence to ServiceNow development standards, governance, and coding best practices.

Required Skills & Experience

• 4–8 years of overall IT experience with strong hands-on ServiceNow development and implementation experience.
• Proven expertise in ServiceNow Security Operations (SecOps).
• Strong implementation experience in:
• Vulnerability Response (VR)
• Security Incident Response (SIR)
• Threat Intelligence (TI)
• Strong understanding of cybersecurity domains, including:
• Vulnerability Management
• Security Incident Management
• Threat Intelligence
• Endpoint Security
• Identity & Access Management (IAM)
• SIEM & SOAR concepts
• Hands-on experience with:
• Flow Designer
• IntegrationHub
• REST & SOAP APIs
• Business Rules
• Script Includes
• Client Scripts
• UI Policies
• ACLs
• JavaScript
• Experience integrating ServiceNow with enterprise security solutions such as:
• Qualys
• Tenable
• Rapid7
• Splunk
• Microsoft Defender
• CrowdStrike
• Palo Alto Cortex
• Microsoft Sentinel (preferred)
• Good understanding of ITSM processes, CMDB, Discovery, and ServiceNow platform architecture.
• Excellent analytical, troubleshooting, communication, and stakeholder management skills.

Preferred Qualifications

• ServiceNow Certified System Administrator (CSA)
• ServiceNow Certified Implementation Specialist – Security Incident Response (Preferred)
• Security certifications such as CompTIA Security+, CEH, CISSP, CISM, or equivalent will be an added advantage.

Preferred Experience

• Experience delivering end-to-end ServiceNow SecOps implementation projects.
• Experience working in enterprise cybersecurity environments.
• Exposure to cloud security and modern security operations practices.
• Experience working in Agile/Scrum delivery models.
• Ability to engage directly with global customers and cross-functional stakeholders.