# Vulnerability Management Engineer (ServiceNow) - Mid-Atlantic region (Remote) at GuidePoint Security

> Remote · region unclear · Mid-level · Software engineering · open. Source: https://alderhq.app/jobs/greenhouse%3Aguidepointsecurity%3A6212201004 (read 2026-11-04).

## Facts (observed)

- Company: [GuidePoint Security](https://alderhq.app/companies/guidepoint-security)
- Location text: Remote; Mid-Atlantic
- Where it can be done from (inferred): Remote · region unclear (evidence: "Location: Remote; Mid-Atlantic")
- Posted: 2026-09-30 (34 days ago)
- First seen by alder: 2026-11-02 · last verified: 2026-11-04
- Reposted: 0 times · edited: 0 times
- Apply on the employer's site: https://boards.greenhouse.io/guidepointsecurity/jobs/6212201004?gh_jid=6212201004
- Skills listed (inferred): JavaScript, CSS, Python

## Pay and sponsorship

- Posted pay: not posted

## Description (the employer's text)

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

### General Description

We are looking for a Vulnerability Management Engineer - ServiceNow to support GuidePoint Security's Mid-Atlantic Exposure Management practice by designing, building, and operating the ServiceNow Security Operations and Vulnerability Response (VR) capabilities that power our clients' vulnerability and exposure management programs. This role will engage in the development of automated vulnerability lifecycle workflows, security tool integrations, and risk-based remediation processes while providing “Wow Them” service to clients and/or internal customers or co-workers.

The Vulnerability Management Engineer - ServiceNow will be required to demonstrate strong ServiceNow Security Operations engineering, scripting, and integration skills, lead by influence, and strong business/financial acumen to drive the use of progressive vulnerability response and exposure management programs that will align the delivery of business objectives and priorities.

### About the Mid-Atlantic Exposure Management Practice

The Mid-Atlantic Exposure Management Practice is responsible for helping clients continuously identify, prioritize, and remediate the vulnerabilities and exposures that pose the greatest risk to their business. We design, implement, and operate the platforms and automation — with ServiceNow Security Operations at the center — that turn raw scanner output into governed, measurable, and business-aware remediation across the organization.

Our team of ServiceNow Security Operations engineers, vulnerability management specialists, and automation developers focuses on Vulnerability Response, Security Operations, and exposure management — using CMDB/ITOM asset context, risk-based prioritization, and Flow Designer automation. We partner with client security, infrastructure, and application teams to shrink remediation timelines, improve SLA adherence, and demonstrate real risk reduction.

Key focus areas of the practice:

- Building and tuning ServiceNow Vulnerability Response and Security Operations workflows
- Integrating scanners and threat intelligence (Qualys, Tenable, Rapid7, Defender, CrowdStrike) into a unified remediation pipeline
- Enabling risk-based, asset-aware prioritization using CMDB, Discovery, and Service Mapping
### Roles and Responsibilities

### ServiceNow Vulnerability Response (VR) Engineering

- Design, configure, and support ServiceNow Vulnerability Response (VR) to manage the end-to-end vulnerability lifecycle — from ingestion and de-duplication through assignment, remediation, exception handling, and closure.
- Build and maintain remediation workflows, vulnerability groups, assignment rules, and calculators using Flow Designer, Business Rules, and other ServiceNow technologies.
- Configure risk scoring and prioritization models that combine CVSS, threat intelligence, exploitability, and business/asset criticality to drive risk-based remediation.
- Develop custom automation and workflows using JavaScript, HTML/CSS, Python, and ServiceNow platform capabilities to reduce manual triage effort.
### ServiceNow Security Operations

- Configure and maintain the ServiceNow Security Operations suite, including Vulnerability Response and, where in scope, Security Incident Response (SIR) and Configuration Compliance.
- Manage the vulnerability lifecycle end-to-end: intake, correlation, prioritization, remediation tracking, verification, and reporting.
- Conduct vulnerability analysis and prioritization, coordinating remediation with client infrastructure, security, and application teams.
- Design and maintain ServiceNow Security Operations dashboards, KPIs, and SLA monitoring to give security leadership visibility into remediation performance and risk posture.

---
Data: alder (https://alderhq.app). Cite https://alderhq.app/jobs/greenhouse%3Aguidepointsecurity%3A6212201004 and the date you read it. Observed facts come from the employer's own listing; location reach, level, family and skills are inferences.