Security Engineer

About the company

Oddball is a digital services agency that builds software, provides DevSecOps and human-centered design for government agencies, delivering citizen- and veteran-focused solutions via a 100% remote engineering team.

About this role

<p>Oddball believes that the best products are built when companies understand and value the things they are working on. We value learning and growth and the ability to make a big impact at a small company. We believe that we can make big changes happen and improve the daily lives of millions of people by bringing quality software to the federal space.&nbsp;</p> <p>We're looking for a <strong>Security Engineer</strong> to join our VA team, embedding security into software delivery and helping maintain the compliance posture of systems that directly serve Veterans.</p> <p><strong>What you'll be doing:</strong></p> <ul> <li>Partner with application development teams to integrate security requirements into design, development, and deployment workflows</li> <li>Support <strong>ATO</strong> efforts including development of <strong>System Security Plans (SSPs)</strong>, <strong>POA&amp;Ms</strong>, and control documentation</li> <li>Conduct risk assessments, vulnerability scans, and threat modeling aligned with <strong>NIST SP 800-53</strong> and VA security standards</li> <li>Participate in <strong>Agile/DevSecOps</strong> pipelines to ensure security is applied throughout the <strong>CI/CD</strong> lifecycle</li> <li>Monitor and respond to security incidents, anomalies, and findings in coordination with stakeholders</li> <li>Implement and maintain monitoring tools such as <strong>Splunk</strong>, <strong>ACAS</strong>, or <strong>Nessus</strong></li> <li>Ensure systems comply with <strong>FISMA</strong>, <strong>HIPAA</strong>, <strong>FedRAMP</strong>, and VA-specific security requirements</li> </ul> <p><strong>What you’ll bring:</strong></p> <ul> <li>Experience supporting <strong>ATO</strong> and <strong>RMF</strong> processes including documentation and continuous monitoring</li> <li>Solid understanding of <strong>NIST SP 800-53</strong>, <strong>FISMA</strong>, and <strong>FedRAMP</strong> frameworks</li> <li>Experience securing cloud environments such as <strong>AWS GovCloud</strong> or <strong>Azure Government</strong></li> <li>Familiarity with vulnerability scanning tools such as <strong>Nessus</strong> or <strong>ACAS</strong></li> <li>Familiarity with <strong>SIEM</strong> platforms such as <strong>Splunk</strong> or <strong>ELK Stack</strong></li> <li>Some scripting or automation experience in <strong>Python</strong>, <strong>Bash</strong>, or <strong>PowerShell</strong> is a plus</li> <li><strong>CISSP</strong>, <strong>CAP</strong>, <strong>CEH</strong>, <strong>CISM</strong>, or DoD 8570 certification is a plus</li> <li>Thrives in a remote, collaborative <strong>Agile</strong> environment and genuinely enjoys working closely with a cross-functional team</li> <li>Communicates clearly and openly, whether writing compliance documentation or coordinating with engineering teams</li> </ul> <ul> <li>Performs other related duties as assigned.</li> </ul> <p><strong>Requirements:</strong></p> <ul> <li>Applicants must be authorized to work in the United States. In alignment with federal contract requirements, certain roles may also require U.S. citizenship and the ability to obtain and maintain a federal background investigation and/or a security clearance.</li> </ul> <p><strong>Education:</strong></p> <ul> <li>Bachelor's Degree&nbsp;</li> </ul> <p><strong>Benefits:</strong></p> <ul> <li>Fully remote</li> <li>Annual stipend</li> <li>Comprehensive Benefits Package</li> <li>Company Match 401(k) plan</li> <li>Flexible PTO, Paid Holidays</li> </ul> <p><strong>Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities:</strong></p> <p>Oddball is an Equal Opportunity Employer and does not discriminate against applicants based on race, religion, color, disability, medical condition, legally protected genetic information, national origin, gender, sexual orientation, marital status, gender identity or expression, sex (including pregnancy, childbirth or related medical conditions), age, veteran status or other legally protected characteristics. Any applicant with a mental or physical disability who requires an accommodation during the application process should contact an Oddball HR representative to request such an accommodation by emailing <a href="mailto:hr@oddball.io">hr@oddball.io</a>&nbsp;</p> <p>The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. 41 CFR 60-1.35(c)</p> <p><strong>Compensation:</strong></p> <p>At Oddball, it’s important each employee is compensated competitively and fairly. In alignment with state legal requirements. A range for the included position is listed below. Be advised, actual offer details are determined by job category, job location, and candidate skill level.</p> <p>United States Wage Range: $110,000 – $145,000</p>