Senior ServiceNow Software Development Engineer (Risk & Security)

CACI • Chantilly, VA

6d

About The Position

The Senior ServiceNow Software Development Engineer is a senior-level technical resource responsible for the hands-on development and deployment of enterprise-grade solutions. This role focuses on the end-to-end engineering of Integrated Risk Management (IRM) and Security Operations (SecOps) suites. Working within the framework established by the Solution Architect and Lead Engineer, you will translate functional requirements into robust code and high-performance automated workflows.

Requirements

• TS/SCI Clearance with Polygraph
• A Bachelor’s Degree OR advanced degree in a related field
• A minimum of 5 years' technical experience
• Security+ (or equivalent IAT Level II) is required, or be obtained within one month of start
• Excellent oral and written communication skills
• Expert proficiency in GlideScripting, JavaScript, and Ajax
• Deep understanding of CMDB architecture and its relationship to Asset Management
• Experience working on complex ServiceNow projects where analysis of situations or data requires in-depth evaluation
• Proven experience integrating data from at least one enterprise security source (e.g., SIEMs like Splunk/Sentinel, or Scanners like Tenable/Qualys/CrowdStrike) into the ServiceNow platform.

Nice To Haves

• ServiceNow Certified System Administrator and Certified Application Developer
• Proven experience implementing at least one major security suite: SecOps: Security Incident Response, Vulnerability Response, or Configuration Compliance
• IRM/GRC: Policy & Compliance, Risk Management, or CAM (Continuous Authorization and Monitoring)
• Technical familiarity with the NIST Risk Management Framework (RMF) or 800-53 controls
• Familiarity with Git-based development, Automated Test Framework (ATF), or Now Assist AI/ML integration
• Knowledge of at least one operating system: Linux, Unix, Windows
• Strong technical background in Cloud Architecture

Responsibilities

• Perform the technical configuration and development of Security Incident Response (SIR), Vulnerability Response (VR), and Configuration Compliance (CC).
• Build complex, event-driven automation using Flow Designer and IntegrationHub to streamline security and compliance processes.
• Engineer production-ready integrations with external security tools (e.g., Splunk, Tenable, Qualys) using REST/SOAP APIs, MID Servers, and Scripted REST APIs.
• Execute the technical requirements of the NIST Risk Management Framework (RMF) by building automated workflows for tasking and control testing within the CAM module.
• Develop and optimize server-side and client-side logic utilizing JavaScript, Script Includes, and Business Rules to ensure platform scalability.
• Implement granular access controls via ACLs and Data Filtration to protect sensitive TS/SCI-level information.
• Utilize the Automated Test Framework (ATF) to validate all development work, ensuring solution quality across environments.

Benefits

• flexible time off benefit
• robust learning resources
• comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior