SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 180,000 - 220,000 / annual
Odyssey partners with state agencies to design, launch, and operate Education Savings Account (ESA) and grant programs. The company operates across 6 states, powering programs serving 200,000+ students and over $1B in education funding. Odyssey sits at the intersection of GovTech, EdTech, and FinTech, providing technology, program operations, vendor ecosystem management, and family experience.
As Odyssey's first Security Engineer, you will have full ownership of the company's security posture, shaping strategy and building security programs from the ground up. You'll drive best practices across the entire technology stack and product suite in a high-impact, high-visibility role.
Key responsibilities include:
- Collaborate with cross-functional teams to proactively identify, assess, and remediate security risks across products and infrastructure
- Perform static and dynamic vulnerability assessments and drive remediation to resolution
- Evaluate security risks in AI systems and data pipelines, leveraging AI-assisted tooling for threat detection and vulnerability analysis
- Maintain and mature the SOC 2 Type II program
- Design and implement security controls across the full technology stack from application layer to cloud infrastructure
- Translate complex security findings into actionable remediation steps for technical and non-technical stakeholders
- Continuously audit policies, controls, and procedures to stay ahead of evolving threats
- Embed security into developer workflows including CI/CD pipelines, code review processes, and internal tooling
You bring 6+ years of software engineering experience with a focus on security, cloud security, DevOps, or network security. You have solid understanding of industry standards and compliance frameworks (SOC 2, ISO 27001) with hands-on experience driving organizational adherence. You're experienced with AI-assisted tooling for threat detection and code review, deploying SAST/DAST/SCA tools, managing security projects end-to-end, and working with penetration testing tools and methodologies.
The role is available as fully remote (US-based) or hybrid from the NYC office in Tribeca, with the full team coming together twice yearly for an offsite.
