Oddball

Security Engineer

Oddball · $110K–$145K/yr

Software Development · 201-500 employees

8 h ago
Remote Mid (2-5 yrs) Full-time
Log in to apply, save this posting, or score it against your profile with AI.

About the role

The Security Engineer will partner with development teams to integrate security into software delivery and maintain compliance for systems serving Veterans. Responsibilities include conducting risk assessments, vulnerability scans, and managing ATO documentation within Agile/DevSecOps pipelines.

What they look for

Security engineering NIST SP 800-53 ATO RMF FISMA FedRAMP Vulnerability scanning Threat modeling Splunk ACAS Nessus AWS GovCloud Azure Government Python Bash PowerShell

Requirements

Candidates must have experience with ATO and RMF processes, along with a solid understanding of NIST, FISMA, and FedRAMP frameworks. A Bachelor's degree is required, and applicants must be authorized to work in the United States.

Benefits

Fully remote Annual stipend Comprehensive benefits package 401(k) plan Flexible PTO Paid holidays

Full description

Oddball believes that the best products are built when companies understand and value the things they are working on. We value learning and growth and the ability to make a big impact at a small company. We believe that we can make big changes happen and improve the daily lives of millions of people by bringing quality software to the federal space.

We're looking for a Security Engineer to join our VA team, embedding security into software delivery and helping maintain the compliance posture of systems that directly serve Veterans.

What you'll be doing:

  • Partner with application development teams to integrate security requirements into design, development, and deployment workflows
  • Support ATO efforts including development of System Security Plans (SSPs), POA&Ms, and control documentation
  • Conduct risk assessments, vulnerability scans, and threat modeling aligned with NIST SP 800-53 and VA security standards
  • Participate in Agile/DevSecOps pipelines to ensure security is applied throughout the CI/CD lifecycle
  • Monitor and respond to security incidents, anomalies, and findings in coordination with stakeholders
  • Implement and maintain monitoring tools such as Splunk, ACAS, or Nessus
  • Ensure systems comply with FISMA, HIPAA, FedRAMP, and VA-specific security requirements

What you’ll bring:

  • Experience supporting ATO and RMF processes including documentation and continuous monitoring
  • Solid understanding of NIST SP 800-53, FISMA, and FedRAMP frameworks
  • Experience securing cloud environments such as AWS GovCloud or Azure Government
  • Familiarity with vulnerability scanning tools such as Nessus or ACAS
  • Familiarity with SIEM platforms such as Splunk or ELK Stack
  • Some scripting or automation experience in Python, Bash, or PowerShell is a plus
  • CISSP, CAP, CEH, CISM, or DoD 8570 certification is a plus
  • Thrives in a remote, collaborative Agile environment and genuinely enjoys working closely with a cross-functional team
  • Communicates clearly and openly, whether writing compliance documentation or coordinating with engineering teams
  • Performs other related duties as assigned.

Requirements:

  • Applicants must be authorized to work in the United States. In alignment with federal contract requirements, certain roles may also require U.S. citizenship and the ability to obtain and maintain a federal background investigation and/or a security clearance.

Education:

  • Bachelor's Degree

Benefits:

  • Fully remote
  • Annual stipend
  • Comprehensive Benefits Package
  • Company Match 401(k) plan
  • Flexible PTO, Paid Holidays

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities:

Oddball is an Equal Opportunity Employer and does not discriminate against applicants based on race, religion, color, disability, medical condition, legally protected genetic information, national origin, gender, sexual orientation, marital status, gender identity or expression, sex (including pregnancy, childbirth or related medical conditions), age, veteran status or other legally protected characteristics. Any applicant with a mental or physical disability who requires an accommodation during the application process should contact an Oddball HR representative to request such an accommodation by emailing hr@oddball.io

The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. 41 CFR 60-1.35(c)

Compensation:

At Oddball, it’s important each employee is compensated competitively and fairly. In alignment with state legal requirements. A range for the included position is listed below. Be advised, actual offer details are determined by job category, job location, and candidate skill level.

United States Wage Range: $110,000 – $145,000