ServiceNow Security Engineer

Requirements:

• Ability to obtain Department of Homeland Security (DHS) Entry on Duty (EOD)
• Bachelors degree or equivalent, plus 15 years of relevant experience
• Experience supporting ServiceNow development
• Understanding of NIST SP 800-53, the Risk Management Framework (RMF), FedRAMP, and federal security control frameworks
• Hands-on experience supporting Authorization to Operate (ATO) packages, System Security Plan (SSP) development, control implementation statements, and evidence collection
• Experience conducting security assessments, vulnerability analysis, and risk assessments, and tracking remediation
• Desired certifications include CISSP, CCSP, CEH, CySA+, or AWS or Azure security certifications
• Strong documentation and communication skills, with the ability to lead in a complex environment
• Expertise in RMF/NIST, cloud security, and ServiceNow

Responsibilities:

• Perform governance, compliance, and assurance activities to align ServiceNow platforms and instances with NIST SP 800-53, NIST RMF, and FedRAMP requirements
• Define, document, and assess security requirements for ServiceNow implementations; support control selection, tailoring, and technical implementation across configurations and workflows
• Build, configure, and enforce platform security controls, including ACLs, RBAC, encryption, IP restrictions, and settings aligned with the ServiceNow Hardening Guide
• Configure and monitor ServiceNow security events and telemetry, and maintain SIEM integrations for continuous monitoring, alert correlation, and incident detection
• Support continuous monitoring for the ServiceNow boundary, including automated evidence collection, control validation, and recurring assessments
• Manage the platform POA&M lifecycle, documenting findings, assigning owners, tracking milestones, validating remediation, and closing security items
• Develop and maintain ATO packages, including SSPs, technical boundary diagrams, control implementation summaries, and supporting evidence
• Support internal and external assessments and coordinate with Security Control Assessors, federal auditors, and Third-Party Assessment Organizations
• Collaborate with system owners, ISSOs, platform administrators, developers, and solution architects to implement controls and resolve audit findings
• Manage platform and integration vulnerabilities by reviewing patch levels and CVEs, prioritizing fixes, and tracking remediation timelines
• Validate and enforce secure configuration baselines using the ServiceNow Instance Security Center and relevant CIS benchmarks and DISA STIGs
• Assist with incident response in the ServiceNow environment, including triage, root-cause investigation, containment, and reporting
• Analyze transaction, system, and administrative audit logs to detect anomalous activity and support federal logging compliance
• Oversee user access controls, privileged access management, SSO/MFA configurations, and periodic access recertifications
• Maintain configuration integrity and asset visibility in the ServiceNow CMDB in line with RMF inventory and categorization standards
• Develop and maintain security architecture documentation, SOPs, and operational playbooks for platform security administration
• Plan and deliver deployments, upgrades, and maintenance of ServiceNow security capabilities, modules, and platform updates
• Assess risks and security impacts of change requests, plugin installations, update sets, custom integrations, and security policy exceptions
• Support secure development of custom ServiceNow applications and catalog items, including security reviews of scripts, business rules, and automated test pipelines
• Use threat intelligence to improve security workflows, identify emerging threats, and strengthen incident containment playbooks
• Track and report security posture metrics, including hardening scores, vulnerability remediation timelines, POA&M aging, and audit compliance rates

Technologies:

• AWS
• Azure
• Cloud
• CMDB
• Support
• RBAC
• Security
• ServiceNow
• DevSecOps

More

We are hiring a full-time ServiceNow Security Engineer at CACI to join our security team. The role reports to the ServiceNow Program Manager and works closely with our ServiceNow Platform Team in support of customer missions. Travel is not required. We foster a culture centered on integrity, innovation, trust, and continuous growth, and provide flexible time off, learning resources, competitive compensation, and benefits spanning healthcare, wellness, financial and retirement support, family resources, continuing education, and time off. The proposed salary range is $105,100–$231,100; final compensation may depend on location, contract requirements, experience, skills, education, and certifications. The listed range is a national average because the role may be based in multiple locations. We are an equal opportunity employer.

last updated 43 week of 2026