ServiceNow Vulnerability Response Lead

Work Type: Hybrid, subject to final DOE direction
Location: Morgantown, WV
Salary: $150,000–$200,000 per year, based on experience
Employment Type: Full-Time W-2
Anticipated Period of Performance: September 1, 2026–July 12, 2027
Contract Status: Contingent upon contract award

Position Overview

Our client is seeking a hands-on ServiceNow Vulnerability Response Lead to support a proposed Department of Energy engagement involving the implementation and configuration of ServiceNow Vulnerability Response.

The selected professional will install and configure Vulnerability Response capabilities, integrate vulnerability data sources and scanners, establish CI lookup and remediation rules, configure risk calculations and service-level agreements, and implement vulnerability workflows, reports, dashboards, notifications, and workspaces.

This is a senior, hands-on implementation position. Depending on the final team composition, one of the three ServiceNow professionals supporting the project may also assume broader Solution Architect responsibilities.

The anticipated start date is September 1, 2026, or as close to that date as possible.

Key Responsibilities

• Install and configure ServiceNow Vulnerability Response plug-ins.
• Install and configure integrations with the National Vulnerability Database.
• Configure integrations with Common Weakness Enumeration data.
• Configure integrations with the CISA Known Exploited Vulnerabilities catalog.
• Configure vulnerability-scanner integrations available through the ServiceNow Store.
• Configure groups, roles, and permissions for Vulnerability Response.
• Configure Configuration Item lookup rules.
• Configure vulnerability assignment, grouping, and remediation-target rules.
• Implement risk calculators for vulnerability prioritization.
• Configure up to four remediation-task service-level agreements.
• Configure vulnerability auto-close and auto-delete rules.
• Configure false-positive and exception or deferral approval processes.
• Configure out-of-the-box notifications and up to five additional notifications.
• Enable out-of-the-box reports and dashboards.
• Create up to five additional Vulnerability Response reports.
• Configure watch-topic functionality and two initial watch topics.
• Enable linkage to ServiceNow ITSM Change Management.
• Configure Vulnerability Response forms and workspaces.
• Enable solution management using out-of-the-box sources.
• Provide staff training and knowledge transfer.

Minimum Qualifications

• Minimum three years of ServiceNow implementation experience.
• Minimum five years of software-development experience.
• Minimum three years of ServiceNow architecture experience involving solution design, development, and customization.
• Minimum three years of ServiceNow Vulnerability Response experience.
• Minimum three years of experience configuring integrations with the National Vulnerability Database.
• Minimum three years of experience with ServiceNow ITSM Change Management.
• Minimum three years of experience configuring ServiceNow forms and workspaces.
• Minimum three years of experience configuring CI lookup rules.
• Hands-on experience implementing and configuring ServiceNow solutions.
• Current ServiceNow certification.
• Must be a U.S. citizen due to federal contract requirements.
• Must be willing and able to complete applicable background screening and DOE badging requirements.
• Must be prepared for onsite presence in Morgantown, West Virginia, if required by DOE.

Preferred Qualifications

• Bachelor’s degree.
• Previous federal government or Department of Energy experience.
• Ability to commute to Morgantown, WV.

Compensation

$150,000–$200,000 per year, based on experience and contingent upon contract award.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• 401(k)
• Unpaid sick leave and personal time off in accordance with company policy

Work Location

This position is being recruited as hybrid while final work-location guidance is pending from DOE.

Candidates should be prepared for onsite work in Morgantown, West Virginia. The final onsite schedule and remote-work availability will be based on DOE requirements and cannot be guaranteed at this stage.

Security and Citizenship Requirements

Applicants must be U.S. citizens due to federal contract requirements.

No active security-clearance level is currently specified. Selected personnel must successfully complete applicable background screening and DOE identity-verification and badging requirements. Additional access requirements may be established by the DOE Contracting Officer.

Contract Contingency

This position supports an active proposal and is contingent upon contract award. The anticipated period of performance is September 1, 2026 through July 12, 2027. The anticipated start date and work arrangement remain subject to contract award and final DOE direction.