ServiceNow Cyber Analyst

Koniag Government Services, LLC•Washington, DC

10d•$105,000 - $130,000•Hybrid

About The Position

Koniag Advisory and Business Solutions, LLC a Koniag Government Services company, is seeking a ServiceNow Cyber Analyst to support KABS and our government customer in Washington, DC. The position is hybrid, requires 1 day onsite. This position requires the candidate to be able to obtain a Public Trust. The ServiceNow Cyber Analyst will provide security analysis, compliance support, control validation, and risk-informed guidance for ServiceNow platform delivery and sustainment.

Requirements

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or a related discipline, or equivalent work experience.
5+ years of experience in cybersecurity analysis, security compliance, systems security, or risk management.
Experience supporting enterprise applications, cloud platforms, workflow systems, or ServiceNow environments.
Strong understanding of access control, least privilege, audit logging, vulnerability management, incident response, data protection, and control validation.
Ability to analyze ServiceNow platform changes and integrations for security, privacy, compliance, and operational risk.
Experience documenting security findings, mitigation plans, evidence, and risk decisions.
Strong coordination and communication skills across cybersecurity and platform delivery teams.
Ability to obtain a Public Trust clearance.

Nice To Haves

Security+, CISSP, CISM, CAP, GSEC, ServiceNow SecOps, or comparable security/platform certification.
Experience supporting federal cybersecurity requirements, NIST controls, FISMA, FedRAMP, or ATO support activities.
Experience with ServiceNow SecOps, GRC/IRM, Vulnerability Response, CMDB/CSDM, or security operations workflows.
Knowledge of NIST SP 800-53, FedRAMP, FISMA, zero trust principles, and federal audit evidence practices.

Responsibilities

Assess ServiceNow configurations, roles, ACLs, workflows, integrations, data handling, and logging practices for security and compliance risks.
Support security requirements analysis, control mapping, evidence collection, POA&M inputs, audit readiness, and risk tracking.
Coordinate with cybersecurity, platform architects, developers, admins, product owners, and operations teams to resolve security findings.
Review change requests, integration designs, access models, and platform updates for cybersecurity impacts.
Support SecOps, GRC, vulnerability response, incident-related workflows, or cyber reporting capabilities where applicable.
Document security analyses, risk decisions, mitigation recommendations, and operational security procedures.