ServiceNow Functional Subject Matter Expert; SME SIR​/VR

Location:Chantilly, VA (Government/Contractor SCIF) 100% on-site

Clearance: Active Top Secret Required. TS SCI Preferred

We are seeking a Security Incident Response (SIR) / Vulnerability Response (VR) Functional SME to establish structured, playbook-driven incident triage and risk-prioritized vulnerability visibility inside DIA’s Service Now platform. You will define approved incident types and playbooks, the ACAS/Tenable prioritization model, and guide configuration of SIR and VR MVP capability from initial requirements through Walk-phase automation.

This effort is phase-aligned with Effort B1, and both are primarily out-of-the-box implementations with custom development bounded to integration adaptors and DIA-specific workflow configuration.

What We’re Looking For

• Functional expertise in Service Now Security Incident Response and/or Vulnerability Response.
• Experience defining incident-type taxonomies, playbooks and severity/categorization models.
• Familiarity with ACAS/Tenable vulnerability data and risk-based prioritization.
• Experience with CMDB and ITSM linkage for security operations.
• Comfortable supporting SOC analysts through cutover, training and hypercare.

Key Responsibilities

• Document current incident-handling and vulnerability-management practice.
• Define the approved incident-type set and playbook catalog.
• Define the ACAS/Tenable feed, ingestion approach and prioritization model.
• Configure Security Incident Response for the approved incident types with standard playbooks.
• Stand up initial SIR dashboards for the SOC and leadership.
• Guide Walk-phase Vulnerability Response MVP: ingestion, risk-based prioritization, automated remediation-task generation.
• Support CMDB/ITSM linkage, analyst training, and operational handoff.

Required Experience

To be successful in this role, you’ll need:

Success in this role is measured by your ability to bound and deliver a working incident-response and vulnerability-visibility capability that analysts actually use in place of email, spreadsheets and ticket workarounds.

Must meet degree and years of experience criteria below:

Required Certifications

• DoD 8570 IAT II (e.g., Security+)
• Service Now Certified System Administrator (CSA)

Desired Certifications

• GCIH or CySA+
• Service Now Certified Implementation Specialist – Security Incident Response

Salary Range: $150-245+. The final offered salary will be based on several factors, including but not limited to the candidate’s depth of experience, skill set, qualifications, and internal pay equity. Hiring at the top end of the range would not be typical, to allow for future meaningful salary growth in this position

New River Systems is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, nation origin, disability, protected veteran status or any other factor protected by law.