NOTE: Must be a US Citizen to be considered for this position
Overview

The ServiceNow Security Engineer will play a critical role in supporting Hybrid Agile development projects within a Software Development and Support program using ServiceNow’s Enterprise Service Management (ESM) platform for a Federal agency. The primary mission of the projects is to modernize IT Service Management for the agency through the adoption of best practices, process optimization, and continual service improvement. Embracing a DevSecOps methodology, the agency leverages various ServiceNow modules including ITSM (IT Service Management), SPM (Strategic Portfolio Management), ITOM (IT Operations Management), Customer Service Management, among other workflows. The ServiceNow Security Engineer's primary role will involve providing development (configuration) support as a member of an Agile Design or Development Scrum team, focusing on the configuration and management of security settings within the ServiceNow platform to ensure the integrity, confidentiality, and availability of information.

Key Responsibilities:

Configure and manage security settings within the ServiceNow platform to safeguard against unauthorized access and data breaches, ensuring alignment with security policies and regulations.

Develop, implement, and maintain security protocols within the ServiceNow environment, collaborating with other IT teams for secure integration with other enterprise systems.

Conduct vulnerability assessments of the ServiceNow environment, develop and execute threat mitigation strategies, and promptly respond to security incidents.

Participate in Agile Scrum meetings, contributing to the continuous improvement of security practices within the development lifecycle.

Work closely with the DevSecOps team to integrate security practices into the entire software development and deployment lifecycle.

Provide expertise in ServiceNow security best practices to the development team and stakeholders.

Assist in the development of security documentation, including security plans, incident response plans, and standard operating procedures.

Stay updated on the latest security threats, vulnerabilities, and technologies to continually enhance the security posture of the ServiceNow platform.

Qualifications:

· Must be a US Citizen with the ability to pass a background check and receive a Public Trust clearance.

· Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.

· 3-6 years of experience in a similar role, with a focus on security within the ServiceNow platform.

· 8 years additional relevant experience may be substituted for education.

· Must possess ServiceNow certification(s) with a strong preference for certifications in Security Operations (SecOps) or similar.

Desired Skills:

· ITIL v3 and/or ITIL V4 Certification(s) is highly desirable.

· ServiceNow Certification(s) in various modalities is highly recommended.

· Solid understanding of ITSM, SPM, ITOM, and Customer Service Management modules within ServiceNow.

· Proficient in configuring and managing security settings and policies within ServiceNow.

· Experience performing vulnerability assessments and implementing threat mitigation strategies.

· Strong understanding of DevSecOps principles and practices, with the ability to integrate security into Agile development processes.

· Excellent problem-solving skills and the ability to work independently as well as part of a team.

· Familiarity with federal IT security policies, regulations, and standards is highly desirable.

· Strong communication skills, with the ability to convey complex security concepts to both technical and non-technical stakeholders.

The ServiceNow Security Engineer will be instrumental in ensuring the secure and efficient operation of the ServiceNow ESM platform within a dynamic and evolving federal agency environment. Through a combination of technical expertise, innovative thinking, and a commitment to security excellence, the successful candidate will contribute significantly to the modernization of IT Service Management for the agency.