Federal Cloud Security Engineer—ATO/POAM Focus

Oddball; United States; Remote; USD 120.000 - 155.000; Vollzeit

Benefits dieser Stelle

Fully remote

Annual stipend

Comprehensive Benefits Package

Company Match 401(k) plan

Flexible PTO

Zusammenfassung

Oddball is seeking a Security Engineer to join our SEC team and harden our cloud environment while maintaining ATO and driving down the POAM backlog. You will own end-to-end remediation, leverage AWS security practices, and work with DevSecOps to implement IaC, CI/CD pipelines, and Zero Trust patterns in a fully remote, agile setup.

This role requires strong collaboration with engineers and stakeholders, the ability to manage multiple findings, and clear communication as you balance securing

Qualifikationen

• Authorized to work in United States; federal background checks and security clearance may be required.
• Bachelor's degree in a relevant field.
• Experience remediating POAMs and navigating federal ATO processes.
• Familiarity with AWS environments and cloud security practices.
• Knowledge of NIST 800-53 and FISMA frameworks.

Aufgaben

• Deploy and automate CI/CD pipelines with IaC to support DevSecOps practices.
• Own the POAM process end-to-end with attack plans and real-time tracking.
• Assess security findings, determine duplicates, and develop LOEs for remediation.
• Conduct SIAs to achieve and maintain ATO status.
• Implement data tagging and sensitivity management to reduce ATO burden.
• Collaborate with engineers and external stakeholders to move remediation forward.
• Maintain live dashboards for security findings and POAM status.

Kenntnisse

POAM remediation

AWS security

CI/CD pipelines

Zero Trust

NIST 800-53

FISMA

Stakeholder engagement

Agile

Clear communication

Ausbildung

Bachelor's degree

Tools

CloudFormation

Docker

AWS

Jobbeschreibung

Oddball is seeking a Security Engineer to join our SEC team and harden our cloud environment while maintaining ATO and driving down the POAM backlog. You will own end-to-end remediation, leverage AWS security practices, and work with DevSecOps to implement IaC, CI/CD pipelines, and Zero Trust patterns in a fully remote, agile setup.

This role requires strong collaboration with engineers and stakeholders, the ability to manage multiple findings, and clear communication as you balance securing