ServiceNow Security Engineer

The Opportunity:

CACI is seeking a ServiceNow Security Engineer to join our team. Our Security Engineer will report to the ServiceNow Program Manager and work closely with a team of ServiceNow Platform Team. The ideal candidate is a security engineer with RMF/NIST expertise, strong cloud‑security and ServiceNow experience, excellent documentation and communication skills, and the ability to lead in a complex environment.

Responsibilities:

• Governance & Regulatory Assurance: Perform governance, compliance, and assurance activities to ensure the ServiceNow platform aligns with NIST SP 800-53, NIST RMF, and FedRAMP requirements across all environments and instances.
• Security Requirements & Control Design: Define, document, and assess security requirements for ServiceNow implementations; support control selection, tailoring, and technical implementation across instance configurations and workflows.
• Platform Security & Hardening: Build, configure, and enforce ServiceNow instance security controls, including Access Control Lists (ACLs), Role-Based Access Control (RBAC), data encryption (e.g., Column-Level Encryption, encryption in transit), IP address restrictions, and security properties aligned with the ServiceNow Hardening Guide.
• Monitoring & SIEM Integration: Configure and monitor ServiceNow event and security telemetry; maintain integrations with enterprise SIEM platforms for continuous monitoring, alert correlation, and incident detection across platform operations.
• Continuous Monitoring (NIST CA-7): Support continuous monitoring programs for the ServiceNow boundary, including automated evidence gathering, control validation, and recurring assessment activities.
• POA&M Lifecycle Management: Manage the Plan of Action and Milestones (POA&M) lifecycle for the platform: document findings, assign technical owners, track milestones, validate remediation testing, and close security items.
• ATO & Artifact Development: Develop and maintain Authorization to Operate (ATO) packages for the ServiceNow ecosystem, including System Security Plans (SSPs), technical boundary diagrams, control implementation summaries, and supporting evidence artifacts.
• Audit & Assessment Coordination: Support internal and external security assessments; coordinate directly with Security Control Assessors (SCAs), federal auditors, and Third-Party Assessment Organizations (3PAOs) during formal evaluations.
• Cross-Functional Collaboration: Partner with System Owners, ISSOs, ServiceNow platform administrators, developers, and solution architects to implement security controls and remediate audit findings.
• Vulnerability Management: Perform vulnerability management across the ServiceNow platform and integrations: review platform patch levels, evaluate CVEs, prioritize remediation, and track resolution timelines.
• Baseline Compliance & Configuration Management: Validate and enforce secure configuration baselines, utilizing the ServiceNow Instance Security Center (ISC) and applicable security benchmarks (e.g., CIS benchmarks, DISA STIGs).
• Incident Response & SecOps: Assist with security incident response activities impacting the ServiceNow environment, supporting triage, root-cause investigation, containment, and formal reporting.
• Log Review & Audit Compliance: Conduct log analysis, including ServiceNow transaction logs, system logs, and administrative audit trails, to detect anomalous activity and maintain compliance with federal logging mandates (e.g., OMB M-21-31).
• Identity & Access Governance (AC-2): Oversee ServiceNow user access controls, privileged access management, single sign-on (SSO/MFA) configurations, and periodic user access recertifications within the platform.
• Asset & Configuration Inventory: Maintain configuration integrity and asset visibility within the ServiceNow Configuration Management Database (CMDB) in accordance with RMF inventory and categorization standards.
• Security Documentation & SOPs: Develop and maintain technical security architecture documentation, standard operating procedures (SOPs), and operational playbooks for platform security administration.
• Project Delivery & Capability Rollout: Formulate and execute project plans for deploying, upgrading, and maintaining ServiceNow security capabilities, modules, and platform updates.
• Risk Assessments & Change Impact Analysis: Perform risk assessments and security impact evaluations for platform change requests, plugin installations, update sets, custom integrations, and security policy exceptions.
• Secure Platform Development (DevSecOps): Support secure development practices for custom ServiceNow applications and catalog items, conducting security reviews of Script Includes, Business Rules, client scripts, and automated test pipelines.
• Threat Intelligence & Detection: Leverage threat intelligence feeds to refine security workflows, identify emerging platform threats, and enhance incident containment playbooks.
• Metrics & Executive Reporting: Track, aggregate, and report security posture metrics (e.g., instance hardening scores, vulnerability remediation timelines, POA&M aging, and audit compliance rates) using ServiceNow dashboards and reporting tools.

Qualifications:

Required:

• Ability to obtain Department of Homeland Security (DHS) Entry On Duty (EOD)
• B.A./B.S. or equivalent + 15 years of relevant experience
• Experience supporting ServiceNow development
• Understanding of NIST SP 800‑53, RMF, FedRAMP, and federal security control frameworks.
• Hands-on experience supporting ATO packages, SSP development, control implementation statements, and evidence collection.
• Experience performing security assessments, vulnerability analysis, risk assessments, and remediation tracking.

Desired:

• Any of the following certifications is highly desired: CISSP, CCSP, CEH, CySA+, AWS/Azure security certs. 

What You Can Expect:

 A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range:

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

Since this position can be worked in more than one location, the range shown is the national average for the position.

The proposed salary range for this position is:

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.