Security Engineer

Oddball; United States; Remote; USD 120,000 - 155,000; Full time

Benefits offered by this job

Fully remote

Annual stipend

Comprehensive Benefits Package

Company Match 401(k) plan

Flexible PTO

Job summary

Oddball is seeking a Security Engineer to join our SEC team and harden our cloud environment while maintaining ATO and driving down the POAM backlog. You will own end-to-end remediation, leverage AWS security practices, and work with DevSecOps to implement IaC, CI/CD pipelines, and Zero Trust patterns in a fully remote, agile setup.

This role requires strong collaboration with engineers and stakeholders, the ability to manage multiple findings, and clear communication as you balance securing

Qualifications

• Authorized to work in United States; federal background checks and security clearance may be required.
• Bachelor's degree in a relevant field.
• Experience remediating POAMs and navigating federal ATO processes.
• Familiarity with AWS environments and cloud security practices.
• Knowledge of NIST 800-53 and FISMA frameworks.

Responsibilities

• Deploy and automate CI/CD pipelines with IaC to support DevSecOps practices.
• Own the POAM process end-to-end with attack plans and real-time tracking.
• Assess security findings, determine duplicates, and develop LOEs for remediation.
• Conduct SIAs to achieve and maintain ATO status.
• Implement data tagging and sensitivity management to reduce ATO burden.
• Collaborate with engineers and external stakeholders to move remediation forward.
• Maintain live dashboards for security findings and POAM status.

Skills

POAM remediation

AWS security

CI/CD pipelines

Zero Trust

NIST 800-53

FISMA

Stakeholder engagement

Agile

Clear communication

Education

Bachelor's degree

Tools

CloudFormation

Docker

AWS

Job description

Oddball believes that the best products are built when companies understand and value the things they are working on. We value learning and growth and the ability to make a big impact at a small company. We believe that we can make big changes happen and improve the daily lives of millions of people by bringing quality software to the federal space.

We're looking for a Security Engineer to join our SEC team, working alongside our DevSecOps engineers to harden our cloud environment, maintain our ATO, and actively drive down the program's POAM backlog.

What You'll Be Doing

• Deploy and automate CI/CD pipelines and establish IaC using modern DevSecOps techniques including serverless and Zero Trust patterns
• Own the POAM process end to end — develop a plan of attack with target dates, track progress in real time, and close findings proactively
• Assess incoming security findings, identify duplicates and dependencies, and develop LOEs for remediation
• Conduct Security Impact Analyses (SIAs) to achieve and maintain ATO
• Implement data tagging and sensitivity management practices to reduce the SEC's ATO management burden
• Engage directly with engineers and external stakeholders to drive remediation forward
• Maintain a live dashboard and tracker for all security findings and POAM status

What You’ll Bring

• Hands-on experience remediating POAMs and navigating the federal ATO process
• Proficiency with AWS environments and cloud security practices
• Experience with CI/CD pipelines, CloudFormation, and infrastructure as code
• Familiarity with Zero Trust principles and federal cybersecurity frameworks including FISMA and NIST 800-53
• Strong organizational skills with the ability to manage multiple findings, timelines, and stakeholders simultaneously
• Comfortable engaging directly with engineers and external stakeholders to move remediation forward
• Experience with Docker and containerized environments is a plus
• Thrives in a remote, collaborative Agile environment and genuinely enjoys working closely with a cross-functional team
• Communicates clearly and openly, whether updating a tracker or presenting findings to leadership
• Performs other related duties as assigned

Requirements

• Applicants must be authorized to work in the United States. In alignment with federal contract requirements, certain roles may also require U.S. citizenship and the ability to obtain and maintain a federal background investigation and/or a security clearance.

Education

• Bachelor’s degree

Benefits

• Fully remote
• Annual stipend
• Comprehensive Benefits Package
• Company Match 401(k) plan
• Flexible PTO, Paid Holidays

Oddball is an Equal Opportunity Employer and does not discriminate against applicants based on race, religion, color, disability, medical condition, legally protected genetic information, national origin, gender, sexual orientation, marital status, gender identity or expression, sex (including pregnancy, childbirth or related medical conditions), age, veteran status or other legally protected characteristics. Any applicant with a mental or physical disability who requires an accommodation during the application process should contact an Oddball HR representative to request such an accommodation by emailing [e-mail]

Compensation

At Oddball, it’s important each employee is compensated competitively and fairly. In alignment with state legal requirements. A range for the included position is listed below. Be advised, actual offer details are determined by job category, job location, and candidate skill level.

United States Wage Range: $120,000 – $155,000