Security Engineer

Oddball believes that the best products are built when companies understand and value the things they are working on. We value learning and growth and the ability to make a big impact at a small company. We believe that we can make big changes happen and improve the daily lives of millions of people by bringing quality software to the federal space.

We're looking for a Security Engineer to join our VA team, embedding security into software delivery and helping maintain the compliance posture of systems that directly serve Veterans.

What you'll be doing

• Partner with application development teams to integrate security requirements into design, development, and deployment workflows
• Support ATO efforts including development of System Security Plans (SSPs), POA&Ms, and control documentation
• Conduct risk assessments, vulnerability scans, and threat modeling aligned with NIST SP 800-53 and VA security standards
• Participate in Agile/DevSecOps pipelines to ensure security is applied throughout the CI/CD lifecycle
• Monitor and respond to security incidents, anomalies, and findings in coordination with stakeholders
• Implement and maintain monitoring tools such as Splunk, ACAS, or Nessus
• Ensure systems comply with FISMA, HIPAA, FedRAMP, and VA-specific security requirements

What you'll bring

• Experience supporting ATO and RMF processes including documentation and continuous monitoring
• Solid understanding of NIST SP 800-53, FISMA, and FedRAMP frameworks
• Experience securing cloud environments such as AWS GovCloud or Azure Government
• Familiarity with vulnerability scanning tools such as Nessus or ACAS
• Familiarity with SIEM platforms such as Splunk or ELK Stack
• Some scripting or automation experience in Python, Bash, or PowerShell is a plus
• CISSP, CAP, CEH, CISM, or DoD 8570 certification is a plus
• Thrives in a remote, collaborative Agile environment and genuinely enjoys working closely with a cross-functional team
• Communicates clearly and openly, whether writing compliance documentation or coordinating with engineering teams
• Performs other related duties as assigned.

Requirements

• Applicants must be authorized to work in the United States. In alignment with federal contract requirements, certain roles may also require U.S. citizenship and the ability to obtain and maintain a federal background investigation and/or a security clearance.

Education

• Bachelor's Degree

Benefits

• Fully remote
• Annual stipend
• Comprehensive Benefits Package
• Company Match 401(k) plan
• Flexible PTO, Paid Holidays