ServiceNow Security Engineer — RMF/NIST Expert

CACI International Inc; United States; Remote; USD 105,000 - 231,000; Full time

Job summary

CACI International Inc is seeking a ServiceNow Security Engineer to join our security program. You will lead governance, RMF/NIST mapping, FedRAMP compliance, and hardening of ServiceNow instances across environments, ensuring strong protective controls and auditable evidence.

You will partner with ISSOs, platform admins, developers, and federal auditors to build SSPs, ATO packages, POA&Ms, and vulnerability remediation plans while contributing to continuous monitoring, incident response, and

Qualifications

• Ability to obtain DHS EOD
• 15+ years of relevant experience
• Experience supporting ServiceNow development
• Knowledge of NIST SP 800-53, RMF, FedRAMP
• Experience with ATO packages, SSPs, and evidence collection
• Experience performing security assessments, vulnerability analysis, and remediation tracking

Responsibilities

• Governance & regulatory assurance to align ServiceNow with NIST SP 800-53, RMF, and FedRAMP
• Define, document, and assess security requirements for ServiceNow
• Build, configure, and enforce ServiceNow security controls (ACLs, RBAC, encryption)
• Configure and monitor event and security telemetry; integrate with SIEM
• Support continuous monitoring programs and POA&M lifecycle
• Develop and maintain ATO packages, SSPs, and boundary diagrams
• Coordinate security assessments with SCAs and auditors
• Collaborate with platform admins, developers, and solution architects to remediate findings
• Perform vulnerability management across ServiceNow and integrations
• Enforce secure baselines using CIS/DISA benchmarks
• Assist with incident response and SecOps activities
• Analyze logs to detect anomalies and ensure compliance

Skills

ServiceNow security

NIST RMF

FedRAMP

Vulnerability assessment

A SO/SSP development

Audits & compliance

SIEM integration

RBAC/ACL

Education

B.A./B.S. or equivalent + 15 years experience

Job description

CACI International Inc is seeking a ServiceNow Security Engineer to join our security program. You will lead governance, RMF/NIST mapping, FedRAMP compliance, and hardening of ServiceNow instances across environments, ensuring strong protective controls and auditable evidence.

You will partner with ISSOs, platform admins, developers, and federal auditors to build SSPs, ATO packages, POA&Ms, and vulnerability remediation plans while contributing to continuous monitoring, incident response, and