About Northern Trust
As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions.
Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide.
With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.
The Senior ServiceNow Developer – Vulnerability Response & Configuration Compliance is responsible for the design, development, integration, and ongoing optimization of ServiceNow security operations capabilities focused on Vulnerability Response (VR) and Configuration Compliance (CC).
This role will partner with Cybersecurity, Vulnerability Management, Configuration Management, CMDB, Infrastructure, and ServiceNow platform teams to transform vulnerability and configuration data into actionable remediation workflows. The developer will provide hands-on technical leadership across implementation, integration, automation, troubleshooting, platform upgrades, and production support.
The ideal candidate combines strong ServiceNow development experience with an understanding of enterprise vulnerability management, configuration compliance, CMDB relationships, and security remediation processes.
Key Responsibilities
Vulnerability Response
- Design, configure, develop, and enhance ServiceNow Vulnerability Response capabilities.
- Develop workflows supporting vulnerability ingestion, normalization, prioritization, assignment, remediation, exception management, and closure.
- Configure and customize vulnerability-related records, business rules, Script Includes, UI policies, client scripts, Flow Designer flows, scheduled jobs, notifications, and other platform components.
- Integrate ServiceNow with enterprise vulnerability scanning and security platforms using REST APIs, IntegrationHub, MID Servers, and other supported integration mechanisms.
- Develop automation to improve vulnerability assignment, remediation orchestration, exception handling, and operational reporting.
- Troubleshoot data ingestion, reconciliation, CI matching, assignment, and integration issues.
- Support vulnerability remediation teams with scalable solutions for managing large volumes of vulnerability data.
Configuration Compliance
- Design and implement ServiceNow Configuration Compliance capabilities supporting enterprise security and configuration-control requirements.
- Develop workflows to ingest, evaluate, route, track, and remediate configuration compliance findings.
- Automate assignment of compliance findings based on CI ownership, support groups, infrastructure responsibility, and other defined business rules.
- Support configuration compliance exception and remediation workflows.
- Partner with Security and Infrastructure teams to translate control requirements into sustainable ServiceNow workflows and technical solutions.
- Develop dashboards and reporting that provide visibility into compliance findings, remediation status, exceptions, and aging.
CMDB & Data Quality
- Ensure VR and Configuration Compliance solutions appropriately leverage ServiceNow CMDB data and CI relationships.
- Develop and troubleshoot CI matching and reconciliation logic used to associate security findings with configuration items.
- Identify and remediate data-quality issues that prevent accurate routing or ownership of security findings.
- Partner with CMDB and Discovery teams to improve CI identification and data quality where vulnerabilities or compliance findings cannot be reliably associated with infrastructure assets.
ServiceNow Development & Engineering
- Develop maintainable solutions using ServiceNow server-side and client-side scripting, including JavaScript, Glide APIs, Script Includes, Business Rules, UI Actions, Client Scripts, ACLs, and scheduled processing.
- Build automation using Flow Designer, IntegrationHub, REST/SOAP APIs, and MID Server integrations.
- Design solutions that minimize unnecessary customization and align with ServiceNow platform architecture and upgradeability principles.
- Perform technical design reviews and develop reusable components and integration patterns.
- Troubleshoot complex application, integration, data, performance, and production issues.
- Develop automated tests using ServiceNow Automated Test Framework (ATF), where appropriate.
- Support platform upgrades, patches, regression testing, release validation, and production deployments.
- Maintain technical documentation, solution designs, configuration documentation, and operational support procedures.
Technical Leadership
- Serve as a senior technical resource for Vulnerability Response and Configuration Compliance.
- Translate cybersecurity and vulnerability-management requirements into scalable ServiceNow technical designs.
- Conduct code reviews and promote ServiceNow development standards across development teams.
- Collaborate with ServiceNow architects, security architects, infrastructure engineering teams, product owners, and external implementation partners.
- Evaluate technical debt and recommend opportunities to replace customization with supported platform functionality.
- Participate in architecture, design, release-readiness, and production-support reviews.
Required Qualifications
- 5+ years of hands-on ServiceNow development or engineering experience.
- Strong ServiceNow development experience with:
- JavaScript
- Glide APIs
- Script Includes
- Business Rules
- Client Scripts and UI Policies
- ACLs
- Flow Designer
- IntegrationHub
- REST/SOAP integrations
- MID Server
- Import Sets and Transform Maps
- Automated Test Framework
- Hands-on experience implementing, developing, or supporting ServiceNow Vulnerability Response.
- Experience with Configuration Compliance or comparable ServiceNow security/compliance capabilities.
- Strong understanding of ServiceNow CMDB, CI relationships, asset/CI identification, and data-quality dependencies.
- Experience troubleshooting integrations and high-volume data-processing workflows.
- Experience designing solutions across development, test/UAT, and production environments.
- Understanding of source control, release management, testing, and enterprise change-management practices.
Preferred Qualifications
- 5-7 years experience integrating ServiceNow with vulnerability or security platforms such as Tenable, Qualys, Rapid7, Microsoft Defender, or similar technologies.
- Experience with ServiceNow Security Operations applications and enterprise cybersecurity workflows.
- Understanding of vulnerability management concepts including CVEs, CVSS scoring, remediation, risk prioritization, vulnerability exceptions, and remediation SLAs.
- Understanding of configuration security benchmarks and standards such as CIS Benchmarks or NIST guidance.
- Experience working with ServiceNow Discovery, Service Graph Connectors, or other CMDB data sources.
- Experience with DevOps/CI-CD practices for ServiceNow development.
- Experience operating ServiceNow within a large, highly regulated enterprise environment.
Preferred Certifications
- ServiceNow Certified System Administrator (CSA)
- ServiceNow Certified Application Developer (CAD)
- Relevant ServiceNow Security Operations / Vulnerability Response implementation certification or accreditation
- Security certifications such as Security+, CISSP, or similar are beneficial but not required
Core Competencies
- Advanced ServiceNow development and troubleshooting
- Vulnerability and security workflow automation
- Configuration compliance
- CMDB and CI data management
- Enterprise integrations
- Technical solution design
- Root-cause analysis and production support
- Secure coding and platform governance
- Cross-functional collaboration
- Technical documentation and knowledge transfer
Success in the Role
Success will be demonstrated through reliable and scalable VR and Configuration Compliance solutions that:
- Improve automation of vulnerability and compliance remediation.
- Increase the accuracy of CI-to-security-finding relationships.
- Reduce manual assignment and remediation effort.
- Improve visibility into vulnerabilities, compliance findings, exceptions, and remediation status.
- Maintain platform stability, maintainability, security, and upgradeability.
- Enable Security and Infrastructure teams to move efficiently from finding identification to accountable remediation and closure.
Salary Range:
$114,500 - 194,700 USDSalary range is a good faith estimate of base pay. Northern Trust provides a comprehensive benefits package including retirement benefits (401k and pension), health and welfare benefits (medical, dental, vision, spending accounts and disability), paid time off, parental and caregiver leave, life & accident insurance, and other voluntary and well-being benefits. Northern Trust also provides a discretionary bonus program that may include an equity component.
Work Authorization
Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. Northern Trust will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa).
Working with Us
As a Northern Trust partner, you will be part of a flexible and collaborative work culture, which has a strong history of financial strength and stability. Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to an inclusive workplace and assisting the communities we serve.
Philanthropy is deeply rooted in Northern Trust’s history and is an essential element of our culture. Employees around the world give their time and talent to work for the greater good of their communities.
Reasonable Accommodation
Northern Trust is committed to working with and providing adjustments to individuals with health conditions and disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at [email protected], or alternatively you can discuss your individual requirements with the recruiter you are working with.
Skills Required
- 5+ years of hands-on ServiceNow development or engineering experience
- Strong ServiceNow development experience with JavaScript, Glide APIs, Script Includes, Business Rules, Client Scripts, UI Policies, ACLs, Flow Designer, IntegrationHub, REST/SOAP integrations, MID Server, Import Sets, Transform Maps, and Automated Test Framework
- Hands-on experience implementing, developing, or supporting ServiceNow Vulnerability Response
- Experience with Configuration Compliance or comparable ServiceNow security and compliance capabilities
- Strong understanding of ServiceNow CMDB, CI relationships, asset and CI identification, and data-quality dependencies
- Experience troubleshooting integrations and high-volume data-processing workflows
- Experience designing solutions across development, test/UAT, and production environments
- Understanding of source control, release management, testing, and enterprise change-management practices
- 5–7 years of experience integrating ServiceNow with vulnerability or security platforms such as Tenable, Qualys, Rapid7, or Microsoft Defender
- Experience with ServiceNow Security Operations applications and enterprise cybersecurity workflows
- Understanding of CVEs, CVSS scoring, remediation, risk prioritization, vulnerability exceptions, and remediation SLAs
- Understanding of CIS Benchmarks or NIST guidance
- Experience with ServiceNow Discovery, Service Graph Connectors, or other CMDB data sources
- Experience with DevOps and CI/CD practices for ServiceNow development
- Experience operating ServiceNow in a large, highly regulated enterprise environment
- ServiceNow Certified System Administrator or Certified Application Developer certification
- Relevant ServiceNow Security Operations or Vulnerability Response certification or accreditation
- Security+ or CISSP certification
Northern Trust Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Northern Trust and has not been reviewed or approved by Northern Trust.
-
Retirement Support — A 401(k) with company match alongside an employer‑funded defined‑benefit pension is highlighted in employer‑verified materials and filings, setting the retirement package apart from many private employers.
-
Leave & Time Off Breadth — PTO is portrayed as solid overall, and two paid volunteer days per year are clearly documented across corporate materials.
-
Parental & Family Support — Company sources and postings reference paid parental and caregiver leave and recent enhancements to parental benefits, indicating meaningful family support within the package.
Northern Trust Insights
What We Do
As a global leader in innovative wealth management, asset servicing and investment solutions, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families and institutions by remaining true to our enduring principles of service, expertise and integrity. A globally recognized Fortune 500 Company in continuous operation since 1889, we’ve built a legacy of empowering clients to reach their goals with confidence. Since our roots as a trust bank, we’ve grown to a global presence with more than 24,000 employees in more than 20 countries and across six core business units: Wealth Management Asset Management Asset Servicing Technology Corporate Functions Enterprise Operations Join a Team That’s Achieving Greater At Northern Trust, we refer to our employees as partners – with good reason. We understand that relationships are the key to our success. Here you’ll join a diverse and inclusive team of innovators with the drive to challenge the way things have always been done. Instead of choosing between a dynamic career and work-life balance, enjoy working with a team that supports your goals in the office and at home. We’ll help you get where you want to go without sacrificing what matters most to you. Delivering value and adhering to our enduring principles What are enduring principles? Since our founding, they have guided our strategy and success. Thanks to the dedication of our partners, Northern Trust continues to thrive by adhering to three enduring principles: service, expertise and integrity . What does this mean? Service Northern Trust has a relentless drive to provide exceptional service to our clients, our partners and our communities. We set new standards and go above and beyond in our commitment to delivering greater results. Expertise Expertise is at the core of who we are. We focus sharply on what we do well. From expanding our capabilities, to hiring talented professionals to developing innovative solutions, our expertise is why we continue to be a trusted advisor for generations of families and institutions. Integrity Operating with uncompromising ethics is central to Northern Trust’s heritage. As a result, our clients, partners and communities know they can rely on us. For more than 130 years, our integrity has been our guide – and that will never change.
Why Work With Us
At Northern Trust, we go further because we go together. We embrace flexibility, encourage balance, and prioritize inclusion at all levels, working together to keep you connected. We are committed to our employees—all 24,000 of them. Whether this is a first step or a bold new leap in your career, we’re here to help you move forward.
Gallery
.png){kind=logo}
