> Markdown version of [/jobs/ext/1920821-software-engineer-ai-evaluation-automation](https://www.wearedevelopers.com/jobs/ext/1920821-software-engineer-ai-evaluation-automation). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Software Engineer - AI Evaluation & Automation - **Company:** PROGILE SOLUTIONS, LLC - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $124,800.0 - $249,600.0 - **Contract:** Temporary contract - **Skills:** Computer-Aided Design, Artificial Intelligence, Software as a Service, Cloud Computing Security, Federal Information Processing Standards (FIPS), Platform as a Service (PAAS), Software Engineering, Servicenow - **Published:** August 4, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=a6e99c877c17c9a2 ## About the Role * Minimum of five years of hands-on experience in security compliance, audit readiness, technology risk, GRC, or security controls. * Strong working knowledge of security and compliance frameworks such as CMMC, NIST 800-53 or 800-171, SOX, FedRAMP, ISO 27001, or SOC 2. * Hands-on experience with audit evidence management, control documentation, gap identification, and remediation tracking. * Ability to translate technical and regulatory requirements into clear engineering tasks and operational actions. * Experience working directly with engineering, platform, cloud, SaaS, or PaaS teams. * Strong critical-thinking and risk-prioritization skills, with the ability to identify control weaknesses across systems and processes. * Exceptional professional English communication skills, including the ability to clearly translate complex technical and regulatory concepts for engineering, audit, and leadership audiences. * Ability to operate independently and manage multiple priorities in a fast-moving, audit-driven environment. Preferred Qualifications * Seven or more years of relevant experience in security compliance, audit enablement, technology risk, or platform governance. * Direct experience with CMMC certification or readiness assessments. * Experience supporting FIPS 140-2 or FIPS 140-3 encryption initiatives. * Exposure to ServiceNow, SURF, NowSupport, or similar enterprise platforms. * Background in platform governance, internal product compliance, cloud security, or security assurance. * Familiarity with application risk scoring, trust scoring, or control-maturity frameworks. * Experience mapping controls across multiple frameworks to reduce duplicated audit effort. * Relevant certifications are desirable, including CISSP, CISM, CISA, CRISC, CGRC, CCSP, CMMC etc. Profile & Characteristics * Ability to maintain a broad enterprise perspective while identifying detailed audit and control gaps. * Strong judgment in determining which risks and compliance issues require immediate action. * Ability to push back constructively on unclear, unnecessary, or duplicative compliance demands. * Clear, concise, and confident communicator. * Comfortable representing Platform Engineering in high-visibility leadership and audit meetings. * Able to take ownership of identified gaps and drive them through remediation and closure. Environment Platforms include SURF and NowSupport within the ServiceNow ecosystem. The role works across Platform Engineering, GRC, Security, Compliance, and Audit stakeholders in a highly visible capacity., * LinkedIn profile and work experience validation is mandatory. Please provide your LinkedIn Profile ID: * This is a remote role; however, client prefers candidates who are located in West Coast. Work during the PDT hours is required. Can you work during PDT hours? * ServiceNow certification is preferred. Do you have ServiceNow CSA or CAD? * Do you have hands on experience building, or evaluating AI-powered coding tools and software engineering agents, such as Claude Code, Devin, OpenCode, or comparable platforms? Education: * Bachelor's (Required) Experience: * security compliance, audit readiness, technology risk: 5 years (Required) * GRC, or security controls: 5 years (Required) * Audit evidence management and control documentation: 3 years (Preferred) * gap identification, and remediation tracking.: 3 years (Preferred) Language: * English (Required) ## Description * Act as the primary interface between Platform Engineering, Security/GRC, Compliance, and Audit teams. * Own the audit evidence lifecycle, including evidence identification, collection, validation, organization, and submission. * Translate regulatory and security-control requirements into clear, actionable engineering guidance. * Identify audit gaps, weak controls, missing evidence, and remediation needs before they become formal findings. * Support CMMC certification, FIPS encryption, application trust scoring, and related security initiatives. * Challenge unnecessary, duplicative, or overly burdensome control requirements while maintaining compliance intent. * Drive audit readiness, remediation tracking, and cross-functional stakeholder coordination. * Represent Platform Engineering in leadership, compliance, and audit discussions. ## Related Videos - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [The Avengers Initiative (Practical Ethics for Software Engineers)](https://www.wearedevelopers.com/videos/2070-the-avengers-initiative-practical-ethics-for-software-engineers) - [Great DevEx and Regulatory Compliance - Possible?](https://www.wearedevelopers.com/videos/1426-great-devex-and-regulatory-compliance-possible) - [AI in Production: applied AI & enterprise use cases](https://www.wearedevelopers.com/videos/100130-ai-in-production-applied-ai-enterprise-use-cases) - [Empowering Developer Innovation - Balancing Speed, Security, and Scale](https://www.wearedevelopers.com/videos/1689-empowering-developer-innovation-balancing-speed-security-and-scale) - [Official Opening of WeAreDevelopers World Congress 2026](https://www.wearedevelopers.com/videos/100000-official-opening-of-wearedevelopers-world-congress-2026) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [The Prompt Engineer ✍️](https://www.wearedevelopers.com/magazine/216-the-prompt-engineer) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Now is the time for industrialized software development](https://www.wearedevelopers.com/magazine/601-now-is-the-time-for-industrialized-software-development) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)