Senior ServiceNow Software Development Engineer (Risk & Security)

Description

This is a senior, hands-on engineering role for building and deploying enterprise-grade solutions across Integrated Risk Management (IRM) and Security Operations (SecOps) suites on the ServiceNow platform.

You will work inside the framework set by the Solution Architect and Lead Engineer, turning functional requirements into working code and automated workflows.

The team supports national security customer missions.

Responsibilities

• Configure and build Security Incident Response, Vulnerability Response and Configuration Compliance.
• Create complex, event-driven automation in Flow Designer and Integration Hub to speed up security and compliance work.
• Build production-ready integrations with external security tools such as Splunk, Tenable and Qualys, using REST and SOAP APIs, MID Servers and Scripted REST APIs.
• Build automated workflows for tasking and control testing in CAM, carrying out the technical side of the NIST Risk Management Framework (RMF).
• Write and tune server-side and client-side logic in JavaScript, Script Includes and Business Rules so the platform scales.
• Set granular access controls with ACLs and Data Filtration to protect TS/SCI-level information.
• Use the Automated Test Framework (ATF) to validate all development work across environments.

Requirements

• Required: Active TS/SCI clearance with Polygraph.
• Required: A Bachelor's degree or an advanced degree in a related field.
• Required: At least 5 years of technical experience.
• Required: Security+ or equivalent IAT Level II, either held already or obtained within one month of starting.
• Required: Excellent oral and written communication skills.
• Required: Expert-level GlideScripting, JavaScript and Ajax.
• Required: Deep understanding of CMDB architecture and how it relates to Asset Management.
• Required: Experience on complex ServiceNow projects that involved in-depth analysis of situations or data.
• Required: Proven experience integrating data from at least one enterprise security source, such as a SIEM (Splunk or Sentinel) or a scanner (Tenable, Qualys or CrowdStrike), into ServiceNow.
• Desired: ServiceNow Certified System Administrator and Certified Application Developer certifications.
• Desired: Proven experience implementing at least one major security suite, either SecOps (Security Incident Response, Vulnerability Response or Configuration Compliance) or IRM/GRC (Policy & Compliance, Risk Management or CAM).
• Desired: Technical familiarity with the NIST RMF or 800-53 controls.
• Desired: Familiarity with Git-based development, the Automated Test Framework (ATF) or Now Assist AI/ML integration.
• Desired: Knowledge of at least one operating system: Linux, Unix or Windows.
• Desired: Strong technical background in cloud architecture.

Conditions

Full-time, regular position with no travel required.

The position depends on funding and may not be filled right away. Applicants may also be considered for other open roles at the company.

The salary range is $103,800 - $218,100. Final pay depends on factors such as location, Federal Government contract labor categories and wage rates, relevant experience, specific skills, education and certifications.

Benefits

• Comprehensive benefits, including healthcare, wellness, financial, retirement, family support, continuing education and time off.
• Flexible time off that lets you take the time you need.
• Access to robust learning resources.