Security Engineer

Position:
Security Engineer

Company:
Oddball

Compensation:
United States Wage Range: $110,000 – $145,000

Location:
United States

Employment type:
Remote

Short Summary:
Oddball is looking for a Security Engineer to join their VA team, focusing on embedding security into software delivery and maintaining compliance for systems serving Veterans.

Responsibilities:
- Partner with application development teams to integrate security requirements into design, development, and deployment workflows
- Support ATO efforts including development of System Security Plans (SSPs), POA&Ms, and control documentation
- Conduct risk assessments, vulnerability scans, and threat modeling aligned with NIST SP 800-53 and VA security standards
- Participate in Agile/DevSecOps pipelines to ensure security is applied throughout the CI/CD lifecycle
- Monitor and respond to security incidents, anomalies, and findings in coordination with stakeholders
- Implement and maintain monitoring tools such as Splunk, ACAS, or Nessus
- Ensure systems comply with FISMA, HIPAA, FedRAMP, and VA-specific security requirements

Requirement:
- Experience supporting ATO and RMF processes including documentation and continuous monitoring
- Solid understanding of NIST SP 800-53, FISMA, and FedRAMP frameworks
- Experience securing cloud environments such as AWS GovCloud or Azure Government
- Familiarity with vulnerability scanning tools such as Nessus or ACAS
- Familiarity with SIEM platforms such as Splunk or ELK Stack
- Some scripting or automation experience in Python, Bash, or PowerShell is a plus
- CISSP, CAP, CEH, CISM, or DoD 8570 certification is a plus
- Thrives in a remote, collaborative Agile environment and enjoys working closely with a cross-functional team
- Communicates clearly and openly, whether writing compliance documentation or coordinating with engineering teams

Benefits:
- Fully remote
- Annual stipend
- Comprehensive Benefits Package
- Company Match 401(k) plan
- Flexible PTO, Paid Holidays