Senior Security Engineer II (Engineering & Tooling), Remote
AledadeSalary not specified
- Full Time
- Senior (5 to 8 years)
Not SpecifiedCompensation
Senior (5 to 8 years)Experience Level
Full TimeJob Type
UnknownVisa
Federal Government & DefenseIndustries
Requirements
Candidates must be a US Citizen and able to attain low-level security clearance, possessing a Bachelor’s degree, and demonstrating proven experience collaborating with application teams on secure software development practices. Strong familiarity with the full ATO lifecycle and RMF process, including documentation and continuous monitoring is also required, along with deep understanding of NIST SP 800-53, FISMA, FedRAMP, and HIPAA regulatory frameworks. Proficiency in securing cloud platforms such as AWS GovCloud and Azure Government, experience with vulnerability management and scanning tools (Nessus, ACAS), and familiarity with Security Information and Event Management (SIEM) platforms and log analysis (e.g., Splunk, ELK Stack) are necessary. Solid scripting/automation skills (e.g., Python, PowerShell, Bash, GHA) for implementing security controls are also required.
Responsibilities
As a Senior Security Engineer, you will lead security engineering efforts to safeguard systems and data critical to veterans’ healthcare and benefits, working closely with application development teams to embed security into software lifecycles and ensure compliance with federal standards. Your responsibilities will span security architecture, risk management, monitoring, and continuous compliance in cloud, hybrid, and on-premise environments, including designing and implementing security controls, partnering with development teams, supporting ATO efforts, conducting risk assessments, responding to security incidents, implementing monitoring tools, ensuring system compliance, and reviewing third-party solutions. You will also provide mentorship and technical guidance to junior engineers and ensure knowledge sharing across teams.
Skills
Security Controls
Security Architecture
Risk Management
Vulnerability Scanning
Threat Modeling
NIST SP 800-53
VA Handbook 6500
Security Compliance
Cloud Security
Hybrid Environment Security
On-premise Security
Security Monitoring
SIEM (Splunk)
Incident Response
DevSecOps
CI/CD Security
Oddball
Digital modernization for federal services
About Oddball
Oddball focuses on modernizing digital services for federal agencies, ensuring that these services are user-friendly and effective for citizens. Their approach involves creating software solutions that are tailored to the specific needs of both the public and the federal workforce. The company employs a team of skilled professionals, including developers and designers, who work collaboratively throughout the entire process, from the initial design phase to the final deployment of the software. Unlike many other digital agencies, Oddball emphasizes a human-centered design approach, which means they prioritize the needs and experiences of users in their solutions. The goal of Oddball is to enhance the efficiency and accessibility of federal services, ultimately improving the experience for citizens and the effectiveness of government operations.
Key Metrics
Washington, District of ColumbiaHeadquarters
2015Year Founded
VENTURE_UNKNOWNCompany Stage
Government & Public Sector, Enterprise SoftwareIndustries
51-200Employees