Security Engineer

Oddball believes that the best products are built when companies understand and value the things they are working on. We value learning and growth and the ability to make a big impact at a small company. We believe that we can make big changes happen and improve the daily lives of millions of people by bringing quality software to the federal space. 

We're looking for a Security Engineer to join our SEC team, working alongside our DevSecOps engineers to harden our cloud environment, maintain our ATO, and actively drive down the program's POAM backlog.

What you'll be doing:

• Deploy and automate CI/CD pipelines and establish IaC using modern DevSecOps techniques including serverless and Zero Trust patterns
• Own the POAM process end to end — develop a plan of attack with target dates, track progress in real time, and close findings proactively
• Assess incoming security findings, identify duplicates and dependencies, and develop LOEs for remediation
• Conduct Security Impact Analyses (SIAs) to achieve and maintain ATO
• Implement data tagging and sens