Remote DevSecOps Security Engineer (Federal)

Oddball; United States; Remote; USD 110,000 - 145,000; Full time

Benefits offered by this job

Fully remote

Annual stipend

401(k) matching

Flexible PTO and paid holidays

Job summary

Oddball seeks a Security Engineer to embed security into software delivery for VA-focused systems and maintain compliance posture across federal environments.

You will partner with development teams, perform risk assessments and threat modeling, and support ATO/RMF processes while integrating security into CI/CD pipelines and monitoring security tools such as Splunk, ACAS, and Nessus.

Qualifications

• Experience supporting ATO and RMF processes with documentation and continuous monitoring.
• Solid understanding of NIST SP 800-53, FISMA, and FedRAMP frameworks.
• Experience securing cloud environments such as AWS GovCloud or Azure Government.

Responsibilities

• Partner with application development teams to integrate security into design, development, and deployment workflows.
• Support ATO efforts including development of SSPs, POAMs, and control documentation.
• Conduct risk assessments, vulnerability scans, and threat modeling aligned with NIST SP 800-53 and VA security standards.
• Participate in Agile/DevSecOps pipelines to ensure security is applied throughout the CI/CD lifecycle.
• Monitor and respond to security incidents, anomalies, and findings in coordination with stakeholders.
• Implement and maintain monitoring tools such as Splunk, ACAS, or Nessus.
• Ensure systems comply with FISMA, HIPAA, FedRAMP, and VA-specific security requirements.

Skills

ATO

RMF

NIST SP 800-53

FISMA

FedRAMP

Cloud Security

Vulnerability Scanning

SIEM

Python

Bash

PowerShell

CISSP

CAP

CEH

CISM

DoD 8570

Agile/DevSecOps

Splunk

ACAS

Nessus

Cloud (AWS GovCloud / Azure Government

Education

Bachelor's Degree

Tools

Splunk

ACAS

Nessus

ELK Stack

AWS GovCloud

Azure Government

Job description

Oddball seeks a Security Engineer to embed security into software delivery for VA-focused systems and maintain compliance posture across federal environments.

You will partner with development teams, perform risk assessments and threat modeling, and support ATO/RMF processes while integrating security into CI/CD pipelines and monitoring security tools such as Splunk, ACAS, and Nessus.