Founding Security Engineer

New York, NY, Remote. Posted 3 months ago

The role

The Founding Security Engineer will have full ownership of the security posture by shaping strategy and building programs from the ground up. This person will embed security into the technology stack and product suite while partnering with cross-functional teams.

What you will do

Collaborate with cross-functional teams to identify, assess, and remediate security risks
Perform static and dynamic vulnerability assessments and drive remediation
Evaluate security risks in AI systems and data pipelines
Leverage AI-assisted tooling to enhance threat detection, vulnerability analysis, and security operations
Maintain and mature Odyssey's SOC 2 Type II program
Design and implement security controls across the full technology stack
Translate complex security findings into actionable remediation steps
Continuously audit policies, controls, and procedures
Embed security into the developer workflow including CI/CD pipelines and code review processes

Required qualifications

6+ years of Software Engineering experience with a focus on application security, cloud security, DevOps, network security, or similar domains
Solid understanding of industry standards and compliance frameworks (SOC 2, ISO 27001, etc.)
Hands-on experience driving organizational adherence to compliance frameworks
Experience applying AI-assisted tooling to accelerate threat detection, code review, and vulnerability analysis
Experience deploying and operating SAST, DAST, and SCA tools across the software development lifecycle
Strong track record managing security projects end-to-end within timelines and budgets
Experience with penetration testing tools, techniques, and methodologies

Benefits

Medical/Dental/Vision plan(s)
health services
short term disability
unlimited PTO

Before you apply

Applicants must be currently authorized to work in the United States on a full-time basis
Candidates may be asked to fly to the NYC office for an in-person interview

About the company

Odyssey partners with state agencies to design, launch, and operate ESA and school choice programs. The company sits at the intersection of GovTech, EdTech, and FinTech.