SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
ServiceNow is seeking a Solution Architect to lead the expansion of its Vulnerability Intelligence, Prioritization & Detection Response (VIPR/VMDR) capability across EMEA. This role combines vulnerability lifecycle management, exploit intelligence, detection automation, and cross-functional coordination to elevate Armis' cyber defense posture globally.
You will serve as an architect, strategic analyst, and technical operator—owning the end-to-end vulnerability and detection lifecycle from discovery, triage, and prioritization through remediation and reporting. Key responsibilities include:
• Leading the VIPR/VMDR function by integrating threat intelligence, exploit data, and asset context to drive data-backed decisions
• Correlating internal vulnerability telemetry with external feeds (NVD, CISA KEV, EPSS, Mandiant, Shodan, VulnDB, Centrix) to assess exploitability and exposure
• Operating and tuning vulnerability and detection tools (Tenable, Qualys, Rapid7, Wiz, Prisma Cloud, ServiceNow VR) across hybrid customer environments
• Automating vulnerability scoring, detection correlation, and reporting pipelines using Python, PowerShell, REST APIs, or automation rules
• Partnering with Customer Success, Security Engineering, and Cloud Infrastructure teams to track remediation SLAs and MTTR improvements
• Building and publishing risk dashboards, customer-facing reports, and executive briefings using Splunk, Power BI, or Elastic
• Developing and maintaining the Armis Vulnerability Prioritization Model (VPM) aligned with exploit intelligence and business criticality
• Supporting penetration test remediation, red team findings, and customer security audits
• Authoring weekly vulnerability intelligence reports, zero-day summaries, and leadership briefings for APJ/APAC stakeholders
• Collaborating with Product Security and Threat Intelligence teams to integrate vulnerability data into platform insights
• Delivering training sessions and enablement workshops for customers, engineers, and analysts
This is a customer-facing technical role embedded with product engineering and customer success teams, requiring mentorship of senior technical staff and development of scalable knowledge-sharing frameworks.
REQUIREMENTS:
• 6–10+ years of experience in Vulnerability Management, Threat Intelligence, or Security Detection Engineering
• Deep expertise in CVSS, CWE/CVE, NVD, KEV, and exploit prediction (EPSS) frameworks
• Hands-on experience with vulnerability and detection management platforms (Tenable, Qualys, Rapid7, Wiz, Prisma Cloud, ServiceNow VR, Centrix)
• Proven ability to develop automation scripts and data pipelines (Python, PowerShell, Bash, REST APIs, JSON)
• Familiarity with risk-based vulnerability management (RBVM) and prioritization scoring models
• Strong understanding of cloud-native security, container scanning, and hybrid infrastructure (AWS, Azure, GCP)
• Exceptional data storytelling skills—turning technical findings into actionable executive insights
• Demonstrated ability to work independently and as part of a team
• Exceptional communication skills across technical, middle management, and executive levels
• Bachelor's or Master's degree in Information Security, Computer Science, or related discipline
• Previous experience operating in a "Voice of the Customer" (VoC) technical role directly embedded with Product Engineering pods
• Track record of mentoring senior technical staff (TCMs, TAMs, Solutions Engineers) and developing scalable knowledge-sharing frameworks
PREFERRED:
• Prior experience in enterprise SaaS or cybersecurity customer-facing technical programs
• Familiarity with Armis Centrix™ or similar asset intelligence and exposure management tools
• Certifications: CISSP, GCCC, GCTI, CEH, or CySA+
• Experience supporting compliance frameworks (SOC 2, ISO 27001, FedRAMP)
• Strong cross-cultural communication and collaboration skills across global and regional teams (APJ/APAC)
