ServiceNow Functional Subject Matter Expert (SME) – SIR/VR

New River Systems Corporation; Chantilly (VA); Hybrid; USD 150,000 - 245,000; Full time

Job summary

New River Systems Corporation seeks a Security Incident Response (SIR) / Vulnerability Response (VR) Functional SME to establish structured, playbook-driven incident triage and risk-prioritized vulnerability visibility inside DIA’s ServiceNow platform. You will define playbooks, prioritization models, and guide MVP capability from requirements through Walk-phase automation.

The role requires DoD 8570 IAT II or equivalent, ServiceNow CSA certification, and the ability to train SOC analysts during

Qualifications

• Experience in ServiceNow Security Incident Response and/or Vulnerability Response.
• Ability to define incident-type taxonomies, playbooks and severity models.
• Familiarity with ACAS/Tenable vulnerability data and risk-based prioritization.
• Experience with CMDB/ITSM linkage for security operations.
• Comfortable supporting SOC analysts through cutover, training and hypercare.

Responsibilities

• Document current incident-handling and vulnerability-management practice.
• Define the approved incident-type set and playbook catalog.
• Define the ACAS/Tenable feed, ingestion approach and prioritization model.
• Configure Security Incident Response for the approved incident types with standard playbooks.
• Stand up initial SIR dashboards for the SOC and leadership.
• Guide Walk-phase Vulnerability Response MVP: ingestion, risk-based prioritization, automated remediation-task generation.
• Support CMDB/ITSM linkage, analyst training, and operational handoff.

Skills

ServiceNow SIR/VR

Incident taxonomy design

Vulnerability prioritization

ACAS/Tenable familiarity

CMDB/ITSM integration

SOC training/support

Education

High School Diploma/GED

Associates Degree

Bachelor's Degree

Master's Degree

PhD

Job description

Location:Chantilly, VA (Government/Contractor SCIF) 100% on-site

Clearance: Active Top Secret Required. TS SCI Preferred

We are seeking a Security Incident Response (SIR) / Vulnerability Response (VR) Functional SME to establish structured, playbook-driven incident triage and risk-prioritized vulnerability visibility inside DIA’s ServiceNow platform. You will define approved incident types and playbooks, the ACAS/Tenable prioritization model, and guide configuration of SIR and VR MVP capability from initial requirements through Walk-phase automation.

This effort is phase-aligned with Effort B1, and both are primarily out-of-the-box implementations with custom development bounded to integration adaptors and DIA-specific workflow configuration.

What We’re Looking For

• Functional expertise in ServiceNow Security Incident Response and/or Vulnerability Response.
• Experience defining incident-type taxonomies, playbooks and severity/categorization models.
• Familiarity with ACAS/Tenable vulnerability data and risk-based prioritization.
• Experience with CMDB and ITSM linkage for security operations.
• Comfortable supporting SOC analysts through cutover, training and hypercare.

Key Responsibilities

• Document current incident-handling and vulnerability-management practice.
• Define the approved incident-type set and playbook catalog.
• Define the ACAS/Tenable feed, ingestion approach and prioritization model.
• Configure Security Incident Response for the approved incident types with standard playbooks.
• Stand up initial SIR dashboards for the SOC and leadership.
• Guide Walk-phase Vulnerability Response MVP: ingestion, risk-based prioritization, automated remediation-task generation.
• Support CMDB/ITSM linkage, analyst training, and operational handoff.

Required Experience

To be successful in this role, you’ll need:

Success in this role is measured by your ability to bound and deliver a working incident-response and vulnerability-visibility capability that analysts actually use in place of email, spreadsheets and ticket workarounds.

Must meet degree and years of experience criteria below:

High School Diploma/ GED	12
Associates Degree	10
Bachelors Degree	8
Masters Degree	6
PhD	4

Required Certifications

• DoD 8570 IAT II (e.g., Security+)
• ServiceNow Certified System Administrator (CSA)

Desired Certifications

• GCIH or CySA+
• ServiceNow Certified Implementation Specialist – Security Incident Response

Salary Range: $150-245+. The final offered salary will be based on several factors, including but not limited to the candidate’s depth of experience, skill set, qualifications, and internal pay equity. Hiring at the top end of the range would not be typical, to allow for future meaningful salary growth in this position

New River Systems is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, nation origin, disability, protected veteran status or any other factor protected by law.