ServiceNow Security Specialist; REMOTE

Koniag Management Solutions, LLC a Koniag Government Services company, is seeking a Service Now Security Specialist to support KMS and our government customer. This position is remote. This position requires the candidate to be able to obtain a Public Trust.

We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.

• Design, implement, and maintain comprehensive security architecture for the Service Now platform
• Define and enforce security policies, configurations, standards, and procedures for Service Now applications and data
• Create and maintain security documentation, including Access Control Lists (ACLs), roles, groups, and user permissions across all Service Now modules
• Conduct regular security assessments, audits, and vulnerability analyses of the Service Now platform
• Implement and maintain security compliance controls for regulatory requirements (SOX, HIPAA, GDPR, PCI-DSS, etc.)
• Develop and maintain role-based access control (RBAC) frameworks and security models
• Monitor and investigate security incidents, access violations, and anomalous activities
• Collaborate with development teams to ensure secure coding practices and security by design
• Manage Service Now Single Sign-On (SSO), multi-factor authentication (MFA), and identity integration
• Lead security aspects of Service Now upgrades, patches, and platform changes
• Provide security guidance and training to Service Now administrators and developers
• Manage third-party integrations and API security configurations
• Coordinate with internal and external auditors for Service Now security reviews
• Stay current with Service Now security features, vulnerabilities, and industry best practices
• Participate in incident response and disaster recovery planning for the Service Now platform
• Generate security reports and metrics for leadership and compliance purposes
• Build and maintain strong relationships with business leaders and key stakeholders
• Support change management activities related to Service Now implementation

• Bachelor's degree in Business Administration, Management, Computer Science, Engineering, or related field
• Minimum 5-7 years of experience in information security, with at least 3-5 years focused on Service Now security
• Proven experience implementing and managing Service Now security controls and access management
• Experience with Service Now platform administration and configuration
• Strong understanding of security frameworks and compliance requirements (ISO 27001, NIST, CIS Controls)
• Experience conducting security assessments and managing security incidents
• Track record of implementing security best practices in enterprise environments
• Must hold at least one of the following certifications:
  • Certified Information Systems Security Professional (CISSP) certification
  • Certified Information Security Manager (CISM) certification
  • Certified Information Systems Auditor (CISA) certification
  • Certified Ethical Hacker (CEH) or other relevant security certification

• Expert knowledge of Service Now security architecture and security controls
• Deep understanding of Service Now ACLs, roles, groups, and security rule configurations
• Proficiency in Service Now security modules (Security Operations, Vulnerability Response, Threat Intelligence) or other similar security tools
• Strong knowledge of identity and access management (IAM) principles and technologies
• Experience with Service Now authentication methods (SSO, SAML, OAuth, LDAP, Active Directory)
• Understanding of encryption technologies and data protection mechanisms
• Knowledge of network, cloud, & application security logging, monitoring, and SIEM integration
• Experience with security audits, security assessments, vulnerability scanning, & compliance reporting
• Understanding of API security and secure integration patterns
• Knowledge of Service Now scripting for security implementations (JavaScript, Business Rules, Script Includes)
• Excellent…