REMOTEFULLTIME
Security Engineer
Oddball
Remote · remote · Posted 21d ago
Sourced from
Undisclosed2–6 yrsfulltimeRemote
About a minute. You'll make an account on the way through.
agent · working
- Read this posting0.4s
- Found the form on Naukri · 14 questions to answer1.0s
- Decided the answers for all of them2.2s
- Tailor your résumé to this role
- Waiting for you
Section · 01
About this role
Oddball believes that the best products are built when companies understand and value the things they are working on. We value learning and growth and the ability to make a big impact at a small company. We believe that we can make big changes happen and improve the daily lives of millions of people by bringing quality software to the federal space.
We're looking for a Security Engineer to join our SEC team, working alongside our DevSecOps engineers to harden our cloud environment, maintain our ATO, and actively drive down the program's POAM backlog.
What you'll be doing:
- Deploy and automate CI/CD pipelines and establish IaC using modern DevSecOps techniques including serverless and Zero Trust patterns
- Own the POAM process end to end - develop a plan of attack with target dates, track progress in real time, and close findings proactively
- Assess incoming security findings, identify duplicates and dependencies, and develop LOEs for remediation
- Conduct Security Impact Analyses (SIAs) to achieve and maintain ATO
- Implement data tagging and sensitivity management practices to reduce the SECs ATO management burden
- Engage directly with engineers and external stakeholders to drive remediation forward
- Maintain a live dashboard and tracker for all security findings and POAM status
What you'll bring:
- Hands-on experience remediating POAMs and navigating the federal ATO process
- Proficiency with AWS environments and cloud security practices
- Experience with CI/CD pipelines , CloudFormation , and infrastructure as code
- Familiarity with Zero Trust principles and federal cybersecurity frameworks including FISMA and NIST 800-53
- Strong organizational skills with the ability to manage multiple findings, timelines, and stakeholders simultaneously
- Comfortable engaging directly with engineers and external stakeholders to move remediation forward
- Experience with Docker and containerized environments is a plus
- Thrives in a remote, collaborative Agile environment and genuinely enjoys working closely with a cross-functional team
- Communicates clearly and openly, whether updating a tracker or presenting findings to leadership
Requirements
- Applicants must be authorized to work in the United States. In alignment with federal contract requirements, certain roles may also require U.S. citizenship and the ability to obtain and maintain a federal background investigation and/or a security clearance.
Education
- Bachelor's degree
Disclaimer: This job posting and Location has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Section · 02
Skills
DockerTerraformAgileCI/CD PipelinesCloud EnvironmentServerlessamazon web servicesinfrastructure as codecybersecurity frameworksaws cloudformationnistDevsecopsDashboardZero TrustcloudCloud SecurityCyber SecurityLegal
Section · Company
About Oddball
Oddball
Mclean
US
About
Oddball is a digital services company that partners with government agencies to build modern, user-centric software solutions. It specializes in agile development, DevOps, and human-centered design to deliver scalable and secure applications. With a mission-driven approach, Oddball focuses on improving public sector digital experiences while fostering collaboration, innovation, and long-term impact.
Industries
Computer Vision
Find them on