Senior Business Process Consultant – ServiceNow SecOps/SIR

About the role

Deloitte's Cyber team is seeking a senior consultant to lead ServiceNow Security Incident Response (SecOps/SIR) initiatives. You will work with clients across the United States to design, configure, and optimize incident response processes that align with ServiceNow best practices.

Key responsibilities

• Lead workshops and stakeholder interviews with SOC, incident response, threat intelligence, and IT operations leaders.
• Design current‑state assessments, future‑state process flows, runbooks, escalation models, SLAs, KPIs and produce related artifacts.
• Develop epics, user stories and functional designs for alert‑to‑incident logic, playbooks, dashboards and access models.
• Define integration requirements for SIEM, EDR, SOAR, Threat Intelligence feeds and the CMDB.
• Manage agile activities including backlog grooming, sprint planning, story refinement and quality‑check deliverables.
• Mentor junior consultants, manage workstream scope, risks and support project reporting.

Required profile

• Self‑starter with strong analytical and problem‑solving abilities.
• Confident client‑facing communicator comfortable with technical and executive audiences.
• Collaborative leader who can mentor and raise team performance.
• Detail‑oriented with ability to prioritize multiple tasks in a fast‑paced environment.

Required skills

• ServiceNow implementation experience, especially Security Incident Response.
• Knowledge of SIEM, EDR, SOAR and Threat Intelligence integration.
• Familiarity with AI/Now Assist capabilities for incident triage.
• Agile project management and Scrum practices.