Sr. Security Engineer
As Odyssey's first Security Engineer, own the company's security posture by building programs from the ground up, assessing risks, implementing controls across the tech stack, maintaining SOC 2 compliance, and embedding security into development workflows. Requires 6+ years software engineering experience focused on security, cloud, or DevOps, plus hands-on compliance and tooling expertise.
About the job
Responsibilities
- Collaborate closely with cross-functional teams to proactively identify, assess, and remediate security risks across Odyssey's products and infrastructure, proposing enhanced controls and process improvements where needed.
- Perform static and dynamic vulnerability assessments and drive remediation efforts through to resolution.
- Evaluate security risks in AI systems and data pipelines, and leverage AI-assisted tooling to enhance threat detection, vulnerability analysis, and security operations.
- Maintain and mature Odyssey's SOC 2 Type II program, ensuring a secure environment for vendors, customers, end-users, and employees.
- Design and implement security controls across Odyssey's full technology stack — from application layer to cloud infrastructure.
- Translate complex security findings into clear, actionable remediation steps for both technical and non-technical stakeholders.
- Continuously audit policies, controls, and procedures to keep security practices ahead of an evolving threat landscape.
- Embed security seamlessly into the developer workflow — including CI/CD pipelines, code review processes, and internal tooling — without compromising velocity.
Requirements
- 6+ years of Software Engineering experience with a focus on security, cloud security, DevOps, network security, or similar domains.
- Solid understanding of industry standards and compliance frameworks (SOC 2, ISO 27001, etc.) with hands-on experience driving organizational adherence.
- Experience applying AI-assisted tooling to accelerate threat detection, code review, and vulnerability analysis.
- Experience deploying and operating SAST, DAST, and SCA tools across the software development lifecycle.
- Strong track record managing security projects end-to-end — from planning through delivery — within timelines and budgets.
- Experience with penetration testing tools, techniques, and methodologies, with a clear understanding of common vulnerabilities and remediation strategies.
Nice-to-Haves
- Experience with AI systems and data pipelines security risks.
- Familiarity with embedding security into CI/CD pipelines and developer workflows.
Compensation
- Salary range: $180,000 - $220,000 + generous equity depending on experience and location.
- Benefits include Medical/Dental/Vision plan(s), health services, short term disability, unlimited PTO and more.
Skills
Security Engineering, Cloud Security, DevOps, Network Security, SOC 2, ISO 27001, SAST, DAST, Sca, Penetration Testing, AI Tools, CI/CD, Vulnerability Assessment
Similar jobs
Security Engineering jobs
Monarch
Remote
Own and scale security governance, risk, compliance, and customer assurance programs, including audits, controls monitoring, third-party risk, policies, and security questionnaires. The role requires 3–5 years of security GRC experience and hands-on understanding of IAM, endpoint, and cloud controls.
Valon
United States
Leads offensive security, threat intelligence, security testing, and incident response across applications, infrastructure, and networks. The role requires at least five years of relevant experience, cloud security expertise, AI and automation experience, and a bachelor's degree.
Anyscale
IndiaOwn Anyscale’s secure software development lifecycle, partner with engineering on secure architecture and features, and lead vulnerability management and remediation. The role requires 8+ years of product or application security experience and strong hands-on secure-development expertise.
Anyscale
San Francisco, CA
Own Anyscale’s compliance function end to end, leading SOC 2 and ISO 27001 programs, audit readiness, customer security diligence, and enterprise risk management. The role requires 7+ years in governance, risk, and compliance plus strong cloud and SaaS security-controls expertise.
Siftstack
Marina Del Rey, CA
The Senior Application Security Engineer will build secure-by-default software patterns, supply-chain controls, and developer-facing security tooling across a distributed systems platform. The role requires 5+ years of production software experience, strong application security expertise, and depth in Go or Rust.