{"id":3044250,"url":"https://alion.io/job/caci-international-servicenow-security-engineer","title":"ServiceNow Security Engineer","company":{"id":58481,"name":"CACI International","domain":"caci.com","url":"https://alion.io/company/caci-international","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"D","score":47,"open_postings":380,"ghost_share":0.629,"stale_share":0.161,"repost_share":0.747,"time_to_fill_p50_days":48,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Enterprise Apps","role_family":"Enterprise Apps","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":105100,"max":231100,"currency":"USD","period":"year","gross":null,"usd_annual":231100},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"FedRAMP","optional":false},{"name":"ServiceNow","optional":false},{"name":"SIEM","optional":false}],"status":"closed","first_seen_at":"2026-10-20T00:00:00Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-30T22:57:53Z","board_verified":false,"closed_at":"2026-10-30T22:57:53Z","days_open":10,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":10},"description":"Job Title: ServiceNow Security EngineerJob Category: SecurityTime Type: Full timeMinimum Clearance Required to Start: NoneEmployee Type: RegularPercentage of Travel Required: NoneType of Travel: None* * *The Opportunity:\nCACI is seeking a ServiceNow Security Engineer to join our team. Our Security Engineer will report to the ServiceNow Program Manager and work closely with a team of ServiceNow Platform Team. The ideal candidate is a security engineer with RMF/NIST expertise, strong cloud-security and ServiceNow experience, excellent documentation and communication skills, and the ability to lead in a complex environment.\nResponsibilities:\nGovernance & Regulatory Assurance: Perform governance, compliance, and assurance activities to ensure the ServiceNow platform aligns with NIST SP 800-53, NIST RMF, and FedRAMP requirements across all environments and instances.\nSecurity Requirements & Control Design: Define, document, and assess security requirements for ServiceNow implementations; support control selection, tailoring, and technical implementation across instance configurations and workflows.\nPlatform Security & Hardening: Build, configure, and enforce ServiceNow instance security controls, including Access Control Lists (ACLs), Role-Based Access Control (RBAC), data encryption (e.g., Column-Level Encryption, encryption in transit), IP address restrictions, and security properties aligned with the ServiceNow Hardening Guide.\nMonitoring & SIEM Integration: Configure and monitor ServiceNow event and security telemetry; maintain integrations with enterprise SIEM platforms for continuous monitoring, alert correlation, and incident detection across platform operations.\nContinuous Monitoring (NIST CA-7): Support continuous monitoring programs for the ServiceNow boundary, including automated evidence gathering, control validation, and recurring assessment activities.\nPOA&M Lifecycle Management: Manage the Plan of Action and Milestones (POA&M) lifecycle for the platform: document findings, assign technical owners, track milestones, validate remediation testing, and close security items.\nATO & Artifact Development: Develop and maintain Authorization to Operate (ATO) packages for the ServiceNow ecosystem, including System Security Plans (SSPs), technical boundary diagrams, control implementation summaries, and supporting evidence artifacts.\nAudit & Assessment Coordination: Support internal and external security assessments; coordinate directly with Security Control Assessors (SCAs), federal auditors, and Third-Party Assessment Organizations (3PAOs) during formal evaluations.\nCross-Functional Collaboration: Partner with System Owners, ISSOs, ServiceNow platform administrators, developers, and solution architects to implement security controls and remediate audit findings.\nVulnerability Management: Perform vulnerability management across the ServiceNow platform and integrations: review platform patch levels, evaluate CVEs, prioritize remediation, and track resolution timelines.\nBaseline Compliance & Configuration Management: Validate and enforce secure configuration baselines, utilizing the ServiceNow Instance Security Center (ISC) and applicable security benchmarks (e.g., CIS benchmarks, DISA STIGs).\nIncident Response & SecOps: Assist with security incident response activities impacting the ServiceNow environment, supporting triage, root-cause investigation, containment, and formal reporting.\nLog Review & Audit Compliance: Conduct log analysis, including ServiceNow transaction logs, system logs, and administrative audit trails, to detect anomalous activity and maintain compliance with federal logging mandates (e.g., OMB M-21-31).\nIdentity & Access Governance (AC-2): Oversee ServiceNow user access controls, privileged access management, single sign-on (SSO/MFA) configurations, and periodic user access recertifications within the platform.\nAsset & Configuration Inventory: Maintain configuration integrity and asset visibility within the ServiceNow Configuration Management Database (CMDB) in accordance with RMF inventory and categorization standards.\nSecurity Documentation & SOPs: Develop and maintain technical security architecture documentation, standard operating procedures (SOPs), and operational playbooks for platform security administration.\nProject Delivery & Capability Rollout: Formulate and execute project plans for deploying, upgrading, and maintaining ServiceNow security capabilities, modules, and platform updates.\nRisk Assessments & Change Impact Analysis: Perform risk assessments and security impact evaluations for platform change requests, plugin installations, update sets, custom integrations, and security policy exceptions.\nSecure Platform Development (DevSecOps): Support secure development practices for custom ServiceNow applications and catalog items, conducting security reviews of Script Includes, Business Rules, client scripts, and automated test pipelines.\nThreat Intelligence & Detection: Leverage threat intelligence feeds to refine security workflows, identify emerging platform threats, and enhance incident containment playbooks.\nMetrics & Executive Reporting: Track, aggregate, and report security posture metrics (e.g., instance hardening scores, vulnerability remediation timelines, POA&M aging, and audit compliance rates) using ServiceNow dashboards and reporting tools.\nQualifications:\nRequired:\nAbility to obtain Department of Homeland Security (DHS) Entry On Duty (EOD)\nB.A./B.S. or equivalent + 15 years of relevant experience\nExperience supporting ServiceNow development\nUnderstanding of NIST SP 800-53, RMF, FedRAMP, and federal security control frameworks.\nHands-on experience supporting ATO packages, SSP development, control implementation statements, and evidence collection.\nExperience performing security assessments, vulnerability analysis, risk assessments, and remediation tracking.\nDesired:\nAny of the following certifications is highly desired: CISSP, CCSP, CEH, CySA+, AWS/Azure security certs. \n-What You Can Expect:\nA culture of integrity.\nAt CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose - to ensure the safety of our nation.\nAn environment of trust.\nCACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.\nA focus on continuous growth.\nTogether, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground - in your career and in our legacy.\nPay Range:\nThere are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.\nSince this position can be worked in more than one location, the range shown is the national average for the position.\nThe proposed salary range for this position is:\n$105,100-$231,100CACI is an Equal Opportunity Employer.All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.","description_format":"text","description_chars":8092,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible time off"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Data & Analytics","Military","National Security"],"lifecycle":[{"event":"open","at":"2026-10-21T23:47:45Z"},{"event":"close","at":"2026-10-30T22:57:53Z"}],"visa":[],"liveness":null,"pay":{"stated_usd_annual":231100,"is_top_pay":true},"html_url":"https://alion.io/job/caci-international-servicenow-security-engineer","json_url":"https://alion.io/job/caci-international-servicenow-security-engineer.json","meta":{"generated_at":"2026-11-05T01:12:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1415,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58481},"rest":"https://alion.io/mcp/rest/get_company?id=58481"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcaci-international-servicenow-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcaci-international-servicenow-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcaci-international-servicenow-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/caci-international-servicenow-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcaci-international-servicenow-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3044250}},{"tool":"search_jobs","arguments":{"company":"caci.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3044250},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}