Security Engineer

Role Overview

Oddball is hiring a Security Engineer for its VA team. You will help embed security into software delivery and support compliance posture for systems that directly serve Veterans, working alongside application teams and security stakeholders.

What You’ll Be Doing

• Partner with application development teams to integrate security requirements into design, development, and deployment workflows
• Support ATO efforts, including System Security Plans (SSPs), POA&Ms, and control documentation
• Conduct risk assessments, vulnerability scans, and threat modeling aligned with NIST SP 800-53 and VA security standards
• Participate in Agile/DevSecOps pipelines to apply security throughout the CI/CD lifecycle
• Monitor and respond to security incidents, anomalies, and findings with stakeholders
• Implement and maintain monitoring/security tools such as Splunk, ACAS, or Nessus
• Ensure systems comply with FISMA, HIPAA, FedRAMP, and VA-specific security requirements

What You’ll Bring

• Experience supporting ATO and RMF processes (documentation and continuous monitoring)
• Strong understanding of NIST SP 800-53, FISMA, and FedRAMP
• Experience securing cloud environments such as AWS GovCloud or Azure Government
• Familiarity with vulnerability scanning tools like Nessus or ACAS
• Familiarity with SIEM platforms such as Splunk or ELK Stack
• Scripting/automation experience in Python, Bash, or PowerShell (plus)
• CISSP/CAP/CEH/CISM or DoD 8570 certification (plus)
• Thrives in a remote, collaborative Agile environment and communicates clearly

Requirements

• Must be authorized to work in the United States
• For certain federal contract roles: may require U.S. citizenship and ability to obtain/maintain a federal background investigation and/or security clearance