Advisory Solution Consultant

About the role

This position involves providing specialized solution leadership for security operations during customer sales cycles. You will act as a technical expert, guiding clients through the capabilities of ServiceNow's security platform. The role focuses on both acquiring new customers and retaining existing ones by demonstrating the value of our security solutions.

Key facts

What you'll do

• Design and implement creative solutions using ServiceNow's Security Operations features, including Security Incident Response, Threat Intelligence, and Vulnerability Response.
• Address customer inquiries regarding ServiceNow Security Operations.
• Offer strategic advice and share best practices to enhance real-world security operations for our growing customer base.
• Contribute to and develop sales campaigns specifically for Security Operations.
• Maintain and expand a showcase of Security Operations solutions built on the ServiceNow platform.
• Help create solutions and capabilities that empower other Solution Consultants to highlight the value of Security Operations.
• Configure solution environments to meet specific customer requirements and resolve business challenges.
• Collaborate with Product Management and Development teams to improve ServiceNow products with new features based on customer feedback.
• Participate in a global team, sharing best practices to improve team quality and efficiency.
• Stay informed about competitor analyses and understand ServiceNow's unique advantages.
• Support various marketing activities, such as user conferences, trade shows, analyst demonstrations, and webinars.
• Demonstrate how Armis asset intelligence integrates with ServiceNow SecOps workflows for real-time device visibility, automated incident creation, vulnerability enrichment, and CMDB population.
• Position Veza's access graph and identity governance alongside ServiceNow IRM/GRC and SecOps to help customers identify, manage, and fix problematic access combinations and non-human identity risks.
• Develop and present integrated demonstrations combining Armis (asset context), Veza (identity context), and ServiceNow SecOps (response orchestration) for enterprise customers across APJ.

Requirements

• 5 or more years of experience in pre-sales.
• Professional background or strong understanding of Security Operations Centers (SOC), Network Operations Centers (NOC), or Computer Security Incident Response Centers (CSIRC).
• Deep knowledge of networking and security technologies, including SIEM, IDS/IPS, vulnerability management, endpoint protection, breach detection, and threat intelligence.
• Familiarity with various attack vectors and intrusion methods, such as DDoS, malware, phishing, brute force, APT, and buffer overflow.
• Experience with security frameworks like NIST 800-61, ISO27035, or SANS.
• Experience with threat intelligence frameworks, including STIX/TAXII and OpenIOC.
• Ability to consult and clearly explain solutions to business problems.
• Excellent written and oral communication skills, and the ability to work independently.

Nice to have

• Exposure to Armis or similar OT/IoT/IT asset visibility platforms, covering device discovery, risk scoring, and integration with SIEM/SOAR or ITSM tools.
• Exposure to Veza or identity governance and administration (IGA) platforms, including access graph analysis, privilege management, and integration with identity providers like Okta, Azure AD, or AWS IAM.
• Understanding of the connection between identity risk and security operations, specifically how unmanaged access and unknown assets create exploitable attack paths.
• Experience selling or demonstrating security solutions in regulated APJ sectors (financial services, healthcare, critical infrastructure) where OT/IoT security and identity governance are high-priority concerns.
• Additional certifications such as GICSP (Global Industrial Cyber Security Professional) or CIAM (Certified Identity and Access Management).
• Strong preference for candidates who have worked in Information Security at a global or national commercial enterprise.
• Strong preference for candidates with professional security certifications like CISSP, CISM, CISA, or CRISC.

Skills & tools

• ServiceNow Security Operations (Security Incident Response, Threat Intelligence, Vulnerability Response)
• Armis
• Veza
• SIEM
• IDS/IPS
• Vulnerability Management
• Endpoint Protection
• Breach Detection
• Threat Intelligence
• NIST 800-61
• ISO27035
• SANS
• STIX/TAXII
• OpenIOC

Practical notes

ServiceNow supports flexible work arrangements. Eligibility for a specific work persona (flexible, remote, or required in office) may be determined by the distance between your residence and the nearest ServiceNow office. All employment is contingent upon obtaining any required export control approvals.