Senior ServiceNow Engineer (with experience in Security Incident Response)

At Northwestern Mutual, we are strong, innovative and growing. We invest in our people. We care and make a positive difference.

This position is open to remote. However, if local to MKE or NYC, it will require some onsite presence each week (3 days in MKE or 2 days in NYC).

At Northwestern Mutual, we believe relationships are built on trust. That our lives and our work matter. These beliefs launched our company nearly 160 years ago.

Today, they're just a few of the reasons why people choose to build careers at Northwestern Mutual!

We're strong and growing. In a company with such a long and storied history, this may be the most exciting and important time to be a part of Northwestern Mutual.

We're strong, innovative, and growing.

We invest in our people! We provide opportunities for employees to grow themselves, their careers, and in turn, our business.

We are looking for a highly motivated and innovative ServiceNow developer to join NM’s Security Automation team. As a member of the Security Automation team, you will play a pivotal role in building and maintaining a continuous and sustainable security automation pipeline with the goal of enhancing the efficiency, effectiveness and accuracy of detection and response capabilities and reducing manual tasks for the Cybersecurity teams.

This role requires a mix of coding skills, a strong understanding of the ServiceNow platform from a developer’s perspective, experience in web application development, and security domain expertise.

What are the primary responsibilities?

Analyze the technical development requirements and develop integrations between the ServiceNow security modules and / or 3rd-party tools and APIs used by the Cybersecurity teams.

Configure ServiceNow and implement best practices in coding and design as per the ServiceNow standards.

Determine problem areas within our current deployment and recommend and build solutions.

Collaborate with NM’s ServiceNow Platform SRE team to ensure quality and stability of integrations.

Provide checkouts during ServiceNow module and platform upgrades.

Identify opportunities to automate workflows / processes related to security events through ServiceNow or SOAR playbooks

Assist with the ongoing enhancement to the organization’s case management system to decrease response times, increase effectiveness and streamline security operations.

Assist with the design, engineering, deployment, and maintenance of custom automation tools (primarily in Python, and PowerShell)

Assist with the development of dashboards and metrics within the organization’s case management system.

Maintain and improve the team's products, infrastructure, and technology stack.

Develop and maintain documentation related to the automation of workflows related to detection / response procedures for security events.

Required Skills :

5+ years of professional experience developing on the ServiceNow platform including the creation, configuration, and / or customization of ServiceNow products such as ITSM, ITOM, SecOps, etc.

Strong knowledge of the ServiceNow Platform as a product, modules, data model, tables, and capabilities.

Experience developing & administrating on a ServiceNow Platform including working with Workflows, Flows, Business Rules, Script Includes, UI Policies, Client Scripts, Catalog Items & Record Producers, Groups, Roles, Tables

5+ years of professional experience with JavaScript, HTML / CSS and AJAX, and Python.

Relational database expertise in relation to an enterprise software system (Postgres, MS SQL).

Comfortable with REST API best practices and usage.

Excellent written and verbal communications skills.

Comfortable performing Demos for technical and non-technical stakeholders.

Ability to provide constructive feedback around stakeholders’ processes.

Preferred Skills / Certifications

Bachelor's degree in Computer Science, Cybersecurity, Computer Engineering, Software Engineering, or related field.

Experience working in Security Operations, Incident Response, or Penetration Testing.

Experience with the ServiceNow Security Incident Response (SIR) module.

Experience with ServiceNow UI Builder and Next Experience.

Experience with security automation and orchestration tools and / or software development technologies.

Practical experience with automation techniques using PowerShell, Bash, API calls, and regular expressions.

Additional coding experience in one or more programming languages Java, C++, Go.

Experience with cloud services, DevOps, CI / CD environments.

Active ServiceNow Certified Application Developer certification.

Active ServiceNow Certified System Administrator certification.

Comfortable with understanding ServiceNow Licensing.

Our Benefits!

Tons of room for career growth.

We offer highly competitive compensation, including annual bonus opportunities

Medical / Dental / Vision plans, 401(k), pension program

We provide tuition reimbursement, PTO, and Holiday Pay

We provide extensive Professional Training Opportunities

We offer an excellent Work / Life Balance

LI-Remote

Compensation Range : Pay Range - Start :

Pay Range - Start : $110,040.00

$110,040.00

Pay Range - End : $204,360.00

$204,360.00

Job Posting End Date :

10 / 31 / 2024

The timeline for this job posting may be shortened or extended based on organizational needs

Grow your career with a best-in-class company that puts our client’s interests at the center of all we do. Get started now!