Security Engineer @Oddball

Overview

Oddball is seeking a Security Engineer to join their SEC team, collaborating with DevSecOps engineers to enhance their cloud environment and maintain an Authority to Operate (ATO).

Key Responsibilities

• Deploy and automate CI/CD pipelines and establish Infrastructure as Code (IaC) using modern DevSecOps techniques, including serverless and Zero Trust patterns.
• Own the POAM process end-to-end, developing a plan of attack with target dates, tracking progress in real-time, and proactively closing findings.
• Assess incoming security findings, identify duplicates and dependencies, and develop Levels of Effort (LOEs) for remediation.
• Conduct Security Impact Analyses (SIAs) to achieve and maintain ATO.
• Implement data tagging and sensitivity management practices to reduce the SEC's ATO management burden.
• Engage directly with engineers and external stakeholders to drive remediation forward.
• Maintain a live dashboard and tracker for all security findings and POAM status.

Requirements

• Hands-on experience remediating POAMs and navigating the federal ATO process.
• Proficiency with AWS environments and cloud security practices.
• Experience with CI/CD pipelines, CloudFormation, and infrastructure as code.
• Familiarity with Zero Trust principles and federal cybersecurity frameworks including FISMA and NIST 800-53.
• Strong organizational skills capable of managing multiple findings, timelines, and stakeholders simultaneously.
• Comfortable engaging directly with engineers and external stakeholders to move remediation forward.
• Experience with Docker and containerized environments is a plus.
• Thrives in a remote, collaborative Agile environment.
• Effective communication skills with the ability to update trackers or present findings to leadership.

Benefits

• Fully remote work environment.
• Annual stipend.
• Comprehensive benefits package.
• Company match for 401(k) plan.
• Flexible PTO and paid holidays.

Location

Remote, authorized to work in the United States.

How to Apply

Please submit your application through the Oddball careers page.

Deadline

No specific deadline mentioned.