Senior ServiceNow Software Development Engineer (Risk & Security)

CACI•Chantilly, VA

About The Position

The Senior ServiceNow Software Development Engineer is a senior-level technical resource responsible for hands-on development and deployment of enterprise-grade solutions, focusing on end-to-end engineering of Integrated Risk Management (IRM) and Security Operations (SecOps) suites. Working within the framework established by the Solution Architect and Lead Engineer, the engineer translates functional requirements into robust code and high-performance automated workflows. The role includes configuring and developing Security Incident Response (SIR), Vulnerability Response (VR), and Configuration Compliance (CC); building event-driven automations with Flow Designer and Integration Hub; and engineering integrations with external security tools using APIs and MID Servers. It also involves implementing automated workflows for NIST Risk Management Framework requirements in the CAM module, developing server- and client-side logic, protecting sensitive information with access controls, and validating development work using the Automated Test Framework. This position is contingent on funding and may not be filled immediately. Applicants may also be considered for other positions at CACI. The role requires an active TS/SCI clearance with Polygraph and is classified as a regular, full-time position with no travel required.

Requirements

Active TS/SCI clearance with Polygraph.
Bachelor’s degree or an advanced degree in a related field.
At least 5 years of technical experience.
Security+ certification or equivalent IAT Level II certification; may be obtained within one month of start.
Excellent oral and written communication skills.
Expert proficiency in GlideScripting, JavaScript, and Ajax.
Deep understanding of CMDB architecture and its relationship to Asset Management.
Experience working on complex ServiceNow projects requiring in-depth evaluation of situations or data.
Proven experience integrating data from at least one enterprise security source, such as a SIEM or security scanner, into the ServiceNow platform.

Nice To Haves

ServiceNow Certified System Administrator certification.
ServiceNow Certified Application Developer certification.
Experience implementing at least one major security suite, including Security Incident Response, Vulnerability Response, or Configuration Compliance.
Experience implementing an IRM/GRC suite, including Policy & Compliance, Risk Management, or CAM (Continuous Authorization and Monitoring).
Technical familiarity with the NIST Risk Management Framework (RMF) or 800-53 controls.
Familiarity with Git-based development, Automated Test Framework (ATF), or Now Assist AI/ML integration.
Knowledge of at least one operating system: Linux, Unix, or Windows.
Strong technical background in Cloud Architecture.

Responsibilities

Perform technical configuration and development of Security Incident Response (SIR), Vulnerability Response (VR), and Configuration Compliance (CC).
Build complex, event-driven automations using Flow Designer and Integration Hub to streamline security and compliance processes.
Engineer production-ready integrations with external security tools using REST/SOAP APIs, MID Servers, and Scripted REST APIs.
Build automated workflows for tasking and control testing within the CAM module to execute technical requirements of the NIST Risk Management Framework.
Develop and optimize server-side and client-side logic using JavaScript, Script Includes, and Business Rules.
Implement granular access controls using ACLs and Data Filtration to protect sensitive TS/SCI-level information.
Use the Automated Test Framework (ATF) to validate development work and solution quality across environments.