[Hiring] ServiceNow Security Engineer @CACI International

Role Description

CACI is seeking a ServiceNow Security Engineer to join our team. Our Security Engineer will report to the ServiceNow Program Manager and work closely with a team of ServiceNow Platform Team. The ideal candidate is a security engineer with RMF/NIST expertise, strong cloud-security and ServiceNow experience, excellent documentation and communication skills, and the ability to lead in a complex environment.

• Governance & Regulatory Assurance: Perform governance, compliance, and assurance activities to ensure the ServiceNow platform aligns with NIST SP 800-53, NIST RMF, and FedRAMP requirements across all environments and instances.
• Security Requirements & Control Design: Define, document, and assess security requirements for ServiceNow implementations; support control selection, tailoring, and technical implementation across instance configurations and workflows.
• Platform Security & Hardening: Build, configure, and enforce ServiceNow instance security controls, including Access Control Lists (ACLs), Role-Based Access Control (RBAC), data encryption (e.g., Column-Level Encryption, encryption in transit), IP address restrictions, and security properties aligned with the ServiceNow Hardening Guide.
• Monitoring & SIEM Integration: Configure and monitor ServiceNow event and security telemetry; maintain integrations with enterprise SIEM platforms for continuous monitoring, alert correlation, and incident detection across platform operations.
• Continuous Monitoring (NIST CA-7): Support continuous monitoring programs for the ServiceNow boundary, including automated evidence gathering, control validation, and recurring assessment activities.
• POA&M Lifecycle Management: Manage the Plan of Action and Milestones (POA&M) lifecycle for the platform: document findings, assign technical owners, track milestones, validate remediation testing, and close security items.
• ATO & Artifact Development: Develop and maintain Authorization to Operate (ATO) packages for the ServiceNow ecosystem, including System Security Plans (SSPs), technical boundary diagrams, control implementation summaries, and supporting evidence artifacts.
• Audit & Assessment Coordination: Support internal and external security assessments; coordinate directly with Security Control Assessors (SCAs), federal auditors, and Third-Party Assessment Organizations (3PAOs) during formal evaluations.
• Cross-Functional Collaboration: Partner with System Owners, ISSOs, ServiceNow platform administrators, developers, and solution architects to implement security controls and remediate audit findings.
• Vulnerability Management: Perform vulnerability management across the ServiceNow platform and integrations: review platform patch levels, evaluate CVEs, prioritize remediation, and track resolution timelines.
• Baseline Compliance & Configuration Management: Validate and enforce secure configuration baselines, utilizing the ServiceNow Instance Security Center (ISC) and applicable security benchmarks (e.g., CIS benchmarks, DISA STIGs).
• Incident Response & SecOps: Assist with security incident response activities impacting the ServiceNow environment, supporting triage, root-cause investigation, containment, and formal reporting.
• Log Review & Audit Compliance: Conduct log analysis, including ServiceNow transaction logs, system logs, and administrative audit trails, to detect anomalous activity and maintain compliance with federal logging mandates (e.g., OMB M-21-31).
• Identity & Access Governance (AC-2): Oversee ServiceNow user access controls, privileged access management, single sign-on (SSO/MFA) configurations, and periodic user access recertifications within the platform.
• Asset & Configuration Inventory: Maintain configuration integrity and asset visibility within the ServiceNow Configuration Management Database (CMDB) in accordance with RMF inventory and categorization standards.
• Security Documentation & SOPs: Develop and maintain technical security architecture documentation, standard operating procedures (SOPs), and operational playbooks for platform security administration.
• Project Delivery & Capability Rollout: Formulate and execute project plans for deploying, upgrading, and maintaining ServiceNow security capabilities, modules, and platform updates.
• Risk Assessments & Change Impact Analysis: Perform risk assessments and security impact evaluations for platform change requests, plugin installations, update sets, custom integrations, and security policy exceptions.
• Secure Platform Development (DevSecOps): Support secure development practices for custom ServiceNow applications and catalog items, conducting security reviews of Script Includes, Business Rules, client scripts, and automated test pipelines.
• Threat Intelligence & Detection: Leverage threat intelligence feeds to refine security workflows, identify emerging platform threats, and enhance incident containment playbooks.
• Metrics & Executive Reporting: Track, aggregate, and report security posture metrics (e.g., instance hardening scores, vulnerability remediation timelines, POA&M aging, and audit compliance rates) using ServiceNow dashboards and reporting tools.

Qualifications

• Ability to obtain Department of Homeland Security (DHS) Entry On Duty (EOD)
• B.A./B.S. or equivalent + 15 years of relevant experience
• Experience supporting ServiceNow development
• Understanding of NIST SP 800‑53, RMF, FedRAMP, and federal security control frameworks.
• Hands-on experience supporting ATO packages, SSP development, control implementation statements, and evidence collection.
• Experience performing security assessments, vulnerability analysis, risk assessments, and remediation tracking.

Benefits

• A culture of integrity.
• An environment of trust.
• A focus on continuous growth.
• Comprehensive benefits such as healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

Pay Range

The proposed salary range for this position is: $105,100-$231,100. There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications.

Company Description

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.