ServiceNow Security Incident Response (SIR) Admin/Engineer

Job description

Introduction
In this role, you’ll work in our IBM Client Innovation Center (CIC), where we deliver deep technical and industry expertise to a wide range of public and private sector clients around the world. These centers offer our clients locally-based skills and technical expertise to drive innovation and adoption of new technology.

Your Role and Responsibilities
You will join IBM Security Services which is a division of IBM Consulting , responsible for delivering security services to its large global customers, alongside major digital transformation projects in the application and cloud domains.

Job Overview:
We are seeking a skilled and experienced ServiceNow SIR Admin/Engineer to join our dynamic team. The successful candidate will play a crucial role in designing, implementing, and maintaining our Security Incident Response processes within the ServiceNow platform. This individual will collaborate with cross-functional teams to enhance our incident response capabilities, ensuring the security and resilience of our customer’s organization.

Key Responsibilities:
·  ServiceNow SIR Implementation:
·  Configure and customize the ServiceNow platform to support Security Incident Response processes.
·  Implement and maintain Security Incident Response workflows and automation within ServiceNow.
·  Integration and Automation:
·  Integrate ServiceNow SIR with other security tools and platforms to streamline incident response workflows.
·  Develop and maintain automation scripts and playbooks to enhance efficiency in incident response.
·  Documentation and Reporting:
·  Create and maintain comprehensive documentation related to Security Incident Response processes.
·  Generate regular reports on incident response metrics and key performance indicators.
·  Training and Knowledge Transfer:
·  Provide training to internal teams on using the ServiceNow SIR platform and incident response procedures.
·  Foster knowledge sharing and collaboration within the organization.

Required Technical and Professional Expertise
What you will bring to the team:
·  ServiceNow Expertise:
·  In-depth knowledge and hands-on experience with ServiceNow platform, particularly in the area of Security Incident Response.
·  Scripting and Automation:
·  Proficiency in scripting languages (e.g., JavaScript, Python) for automation and customization within ServiceNow.
·  Security Tools Integration:
·  Demonstrated ability to integrate ServiceNow SIR with other security tools and platforms for seamless incident response.
·  Communication Skills:
·  Strong verbal and written communication skills, with the ability to communicate effectively with technical and non-technical stakeholders.

Preferred Technical and Professional Expertise

·  Certifications:
·  ServiceNow Certified Implementation Specialist – Security Incident Response.
·  Relevant cybersecurity certifications (e.g., CISSP, CISM, etc.).
·  Threat Intelligence Integration:
·  Experience integrating threat intelligence feeds into the incident response process.
·  Continuous Improvement:
·  Proven track record of driving continuous improvement in incident response processes and technologies.
·  Collaboration and Teamwork:
·  Ability to work collaboratively in a cross-functional team environment.
·  Adaptability:
·  Flexibility to adapt to evolving security threats and technologies. Education and Experience:
·  Bachelor's degree in Computer Science, Information Technology, or a related field.
·  3+ years of experience in a ServiceNow SIR administration or engineering role.
If you are a highly motivated individual with a passion for cybersecurity and ServiceNow, we invite you to apply for this exciting opportunity. Join us in our mission to strengthen our customer’s security posture and respond effectively to emerging threats.