ServiceNow Agentic AI Developer - IT/OT SecOps (Now Assist, VR, SIR, TI, SPC) - Texas

This is a remote position.

ServiceNow Agentic AI Developer  -  IT/OT SecOps (Now Assist, VR, SIR, TI, SPC)  Remote  -  U.S.

Templar Shield is building the next generation of intelligent cybersecurity operations on the ServiceNow platform. We’re looking for a developer who can fuse ServiceNow SecOps expertise with the emerging world of agentic AI—creating adaptive, intelligent automations that help SOC and OT security teams respond faster, remediate smarter, and strengthen security posture across complex environments.

This role is ideal for someone excited by the idea of blending scripting, AI orchestration, SecOps logic, and operational technology workflows into one unified automation engine.

About Templar Shield

Templar Shield is a boutique, high-performance consulting firm and ServiceNow Elite Partner specializing in Cybersecurity, SecOps, Integrated Risk Management, OT Security, and AI Governance. Our clients span critical infrastructure, energy, utilities, telecom, financial services, healthcare, and public sector—industries where downtime is expensive and security is mission-critical.

Our Agentic AI practice builds autonomous and semi-autonomous capabilities using Now Assist, AI Control Tower, vector search, multi-agent workflows, and advanced security integrations to transform both IT and OT security operations.

Role Overview

The ServiceNow Agentic AI Developer (SecOps) designs, builds, and deploys AI-driven automations across the ServiceNow SecOps suite:

• Security Incident Response (SIR)
  
• Vulnerability Response (VR)
  
• Threat Intelligence (TI)
  
• Security Posture Control (SPC)
  
• OT Security Incident Response & Risk Workflows
  

You will create agentic workflows that perform intelligent triage, automated enrichment, natural-language incident summarization, dynamic remediation guidance, and AI-driven correlation across IT and OT environments.

This is a hands-on development role involving scripting, prompt engineering, orchestration logic, integration development, and security domain knowledge.

Key Responsibilities

Agentic AI & Now Assist Development

• Build Now Assist experiences for SecOps modules—AI-generated incident summaries, enrichment narratives, vulnerability prioritization recommendations, remediation instructions, and posture evaluation.
  
• Implement multi-agent patterns:
  
   -  Retrieval agents for evidence collection
  
   -  Orchestration agents for triage and decision routing
  
   -  Evaluator agents for accuracy, quality, and confidence checks
  
   -  Task agents for automated assignments and follow-through
  
• Configure LLM-backed prompts, guardrails, vector search logic, and agent coordination.
  

ServiceNow SecOps Module Development

• Customize and extend SIR, VR, TI, and SPC to support advanced security workflows.
  
• Build logic for automatic correlations between incidents, vulnerabilities, TI indicators, OT telemetry, and risk conditions.
  
• Create dashboards, workspace UI enhancements, and automated flows for SOC and OT teams.
  
• Implement custom scoring models, enrichment jobs, remediation tasks, and integrations with security tools.
  

Integration, Automation & Scripting

• Build or extend integrations with SIEM, SOAR, EDR/XDR, vulnerability scanners, OT monitoring platforms, asset-discovery tools, and threat-intelligence feeds.
  
• Develop Glide scripts, Script Includes, Flow Designer actions, and IntegrationHub spokes.
  
• Implement vector-based retrieval pipelines for AI-powered enrichment.
  
• Ensure execution speed, reliability, and operational safety of all automations.
  

AI Governance, Logging & Secure Development

• Embed auditability, explainability, output-evaluation logic, and human-override patterns.
  
• Implement model-behavior logging and AI guardrail configurations to satisfy frameworks such as NIST AI RMF, ISO 42001, and emerging U.S. state AI rules.
  
• Document prompts, agent configurations, and decision trees for transparency.
  

Requirements

Required Qualifications

• 3 - 6 years of ServiceNow development experience in SecOps, IRM, or custom apps.
  
• Strong JavaScript development skills (Script Includes, GlideRecord, GlideAjax, business rules, etc.).
  
• Hands-on experience with at least two SecOps modules: SIR, VR, TI, SPC.
  
• Familiarity with Now Assist, LLM APIs, GenAI patterns, vector search, or AI orchestration frameworks.
  
• Experience integrating ServiceNow with security tools such as Splunk, QRadar, Sentinel, CrowdStrike, Tenable, Qualys, Rapid7, Claroty, Nozomi, or other OT security tools.
  
• Ability to design and build workflow automations with Flow Designer and IntegrationHub.
  
• Knowledge of security operations fundamentals—incident response, threat intel, triage, vuln management, MITRE ATT&CK, zero trust, or OT/ICS security.
  

Preferred / Nice-to-Have

• Experience with OT/ICS protocols, SCADA systems, historian logs, or industrial cybersecurity tools.
  
• ServiceNow certifications:
  
   -  CSA, CAD
  
   -  CIS-SecOps, CIS-SIR, CIS-VR
  
• Understanding of NIST 800-53, NIST 800-82, CIS Controls, NERC CIP, TSA pipeline/aviation, ISO 27001, or ISO 62443.
  
• Experience with machine-learning pipelines, Python, or API-driven data engineering.
  
• Experience building retrieval-augmented generation (RAG) or multi-agent systems.
  

Benefits

What We Offer

• Competitive compensation + performance bonus
  
• Fully remote, flexible work environment
  
• Employer-paid health, dental, vision, and life insurance
  
• 401(k) with company match
  
• Dedicated ServiceNow + cybersecurity + AI training and certification budget
  
• Cutting-edge projects in IT/OT security and autonomous SOC operations
  
• A collaborative team that encourages experimentation and new ideas
  

How to Apply

Email your résumé and a short description of one security automation you built—LLM-based or traditional—to careers@templarshield.com, using the subject line:Agentic AI Developer  -  SecOps  -  [Your Name]