ServiceNow Security Engineer

Job description

**This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a ServiceNow Security Engineer based in the United States.** Join a security-focused engineering team responsible for protecting and strengthening enterprise ServiceNow environments supporting critical government missions. In this role, you will lead platform security initiatives, ensure regulatory compliance, and implement robust controls aligned with federal cybersecurity frameworks. You will apply your expertise in NIST Risk Management Framework (RMF), NIST SP 800-53, and FedRAMP to support secure platform configurations and authorization processes. Working closely with platform administrators, developers, architects, and security stakeholders, you will drive vulnerability remediation, continuous monitoring, and risk management activities. You will also oversee security documentation, audit readiness, identity and access governance, and the development of secure ServiceNow applications. This fully remote, full-time opportunity offers the chance to influence security strategy and improve the resilience of complex enterprise technology environments. Ideal for an experienced security professional, this position combines hands-on technical implementation, regulatory assurance, and cross-functional leadership. ### Accountabilities - **Security Governance and Compliance:** Ensure ServiceNow environments and instances comply with NIST SP 800-53, the NIST Risk Management Framework (RMF), FedRAMP, and applicable federal cybersecurity requirements. - **Security Requirements and Control Implementation:** Define, document, assess, and implement security requirements for ServiceNow solutions, including control selection, tailoring, configuration, and workflow integration. - **Platform Hardening:** Configure and enforce security controls, including Access Control Lists (ACLs), Role-Based Access Control (RBAC), encryption at rest and in transit, IP restrictions, and security settings aligned with ServiceNow hardening guidance. - **Continuous Monitoring:** Support continuous monitoring activities in accordance with NIST CA-7, including automated evidence collection, recurring control validation, security assessments, and ongoing compliance verification. - **Security Information and Event Management:** Configure and monitor platform security telemetry and event integrations with enterprise SIEM solutions to support alert correlation, threat detection, and incident investigation. - **Authorization and Security Documentation:** Develop and maintain Authorization to Operate (ATO) documentation, System Security Plans (SSPs), technical boundary diagrams, control implementation statements, and supporting evidence packages. - **Risk and Remediation Management:** Manage Plans of Action and Milestones (POA&Ms), document findings, assign remediation owners, monitor milestones, validate corrective actions, and close security issues. - **Audit and Assessment Coordination:** Coordinate internal and external security assessments, working with Security Control Assessors (SCAs), federal auditors, and Third-Party Assessment Organizations (3PAOs) to support successful evaluations. - **Vulnerability Management:** Review platform patch levels, analyze Common Vulnerabilities and Exposures (CVEs), prioritize remediation activities, and track resolution timelines across ServiceNow environments and integrations. - **Configuration and Baseline Compliance:** Validate secure configuration baselines using ServiceNow Instance Security Center (ISC), CIS benchmarks, DISA Security Technical Implementation Guides (STIGs), and other applicable standards. - **Identity and Access Governance:** Manage user access controls, privileged access, single sign-on (SSO), multifactor authentication (MFA), and periodic access recertification in alignment with federal access-control requirements. - **Incident Response and Security Operations:** Support security incident triage, root-cause analysis, containment, investigation, and reporting for incidents affecting the ServiceNow platform. - **Logging and Audit Analysis:** Review transaction logs, system logs, and administrative audit trails to identify suspicious activity and maintain compliance with federal logging requirements, including OMB M-21-31. - **Asset and Configuration Management:** Maintain the integrity and visibility of assets and configuration records in the ServiceNow Configuration Management Database (CMDB), supporting accurate inventory and RMF categorization. - **Secure Development and DevSecOps:** Review custom ServiceNow applications, catalog items, Script Includes, Business Rules, client scripts, and automated testing pipelines to identify vulnerabilities and promote secure development practices. - **Risk Assessments and Change Management:** Evaluate security risks and operational impacts associated with change requests, plugin installations, update sets, custom integrations, and security policy exceptions. - **Threat Intelligence and Detection:** Use threat intelligence to improve security workflows, identify emerging threats, strengthen detection capabilities, and refine incident containment procedures. - **Project Delivery and Platform Modernization:** Plan and coordinate the deployment, upgrading, maintenance, and rollout of ServiceNow security capabilities, modules, and platform updates. - **Metrics and Executive Reporting:** Develop and maintain dashboards and reports covering security posture, hardening scores, vulnerability remediation timelines, POA&M aging, and audit compliance performance. - **Cross-Functional Collaboration:** Partner with system owners, Information System Security Officers (ISSOs), ServiceNow administrators, developers, and solution architects to implement security controls, resolve audit findings, and maintain a secure operating environment. - **Technical Documentation and Procedures:** Create and maintain security architecture documentation, standard operating procedures, operational playbooks, and other technical guidance for platform security administration. ## Requirements - **Education and Experience:** Bachelor's degree or equivalent qualifications, combined with at least 15 years of relevant professional experience. - **ServiceNow Development:** Demonstrated experience supporting ServiceNow development and familiarity with platform architecture, configuration, application security, and integrations. - **Federal Cybersecurity Frameworks:** Strong understanding of NIST SP 800-53, the NIST Risk Management Framework, FedRAMP, and federal security control requirements. - **ATO and Compliance Documentation:** Hands-on experience supporting Authorization to Operate packages, developing System Security Plans, documenting control implementations, and collecting assessment evidence. - **Security Assessments:** Experience conducting security assessments, vulnerability analysis, risk evaluations, control validation, and remediation tracking. - **Cloud and Platform Security:** Knowledge of enterprise security principles, cloud environments, secure configurations, encryption, identity and access management, and continuous monitoring. - **Vulnerability and Risk Management:** Ability to assess technical vulnerabilities, prioritize remediation, analyze security impacts, and track corrective actions through completion. - **ServiceNow Security Controls:** Familiarity with ACLs, RBAC, the ServiceNow Instance Security Center, secure application development, and platform hardening practices. - **Audit and Regulatory Readiness:** Ability to prepare technical evidence, coordinate assessments, maintain accurate documentation, and communicate compliance findings effectively. - **Communication Skills:** Excellent written and verbal communication skills, with the ability to explain complex security requirements to technical teams, program leadership, and compliance stakeholders. - **Analytical and Problem-Solving Skills:** Strong attention to detail, sound technical judgment, and the ability to investigate security issues and recommend practical solutions. - **Collaboration and Leadership:** Ability to work independently, coordinate cross-functional activities, manage competing priorities, and influence technical decisions in complex environments. - **Security Clearance Eligibility:** Ability to obtain Department of Homeland Security (DHS) Entry on Duty (EOD) authorization. - **Preferred Certifications:** One or more of the following certifications is highly desirable: Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), Certified Ethical Hacker (CEH), CompTIA Cybersecurity Analyst (CySA+), or relevant AWS or Microsoft Azure security certifications. - **Professional Integrity:** Commitment to security best practices, regulatory compliance, confidentiality, accountability, and the protection of sensitive government information. - **Work Arrangement:** Ability to work remotely on a full-time basis while collaborating effectively with distributed technical and security teams. ## Benefits - **Competitive Salary:** Estimated annual salary range of **$105,100–$231,100**, depending on geographic location, relevant experience, education, certifications, applicable government contract labor categories, and contract wage rates. - **Remote Work:** Fully remote work arrangement within the United States, with no travel required for this position. - **Healthcare Benefits:** Access to healthcare coverage options designed to support employee health and well-being. - **Wellness Resources:** Programs and resources intended to support physical and mental wellness. - **Retirement and Financial Benefits:** Access to retirement plans and other financial benefits, subject to applicable plan terms. - **Family Support:** Benefits and resources designed to help employees manage family responsibilities and personal needs. - **Paid Time Off:** Access to time-off benefits and flexible time-off arrangements, subject to applicable policies and eligibility. - **Professional Development:** Learning and development opportunities to expand cybersecurity knowledge, strengthen technical capabilities, and support career growth. - **Meaningful Mission:** The opportunity to contribute to federal cybersecurity objectives and protect mission-critical technology environments. - **Collaborative Work Environment:** Work alongside experienced security professionals, ServiceNow specialists, architects, developers, and program stakeholders. - **Technical Growth:** Opportunities to deepen expertise in ServiceNow security, federal compliance, cloud security, vulnerability management, and DevSecOps practices.