[![Image]() Meet Jobicy Copilot — free AI autofill for job applications + remote job alerts ›](#) [All remote jobs](https://jobicy.com/jobs.md)Open role[![Oddball logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2022/02/8c034287ffd7b6474f90645b1c72e60a.jpeg)](https://jobicy.com/company/oddball.md)Remote opportunity at[Oddball](https://jobicy.com/company/oddball.md) # ATO Specialist Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move. [Apply for this job](#job-application)[View company](https://jobicy.com/company/oddball.md)Share21 Sep 2026Published46Listing views1Application actions21 Oct 2026Apply before Opportunity details ## About this role. AI SummaryOddball is hiring an ATO Specialist to own the security authorization, reauthorization, and continuous-monitoring lifecycle for a VA veteran-facing chatbot and voicebot system. The role leads federal RMF compliance activities, maintains audit-ready security and privacy documentation, and coordinates assessments and remediation. It partners closely with engineering, program leadership, and VA stakeholders to ensure controls are implemented and evidenced effectively. Strong experience with ATO processes, SSPs, POA&Ms, SARs, PIAs, and Zero Trust Architecture is required. The position is fully remote for applicants authorized to work in the United States. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 4/5EasyHard ### Pace & Pressure 4/5RelaxedFast-paced ### Autonomy Level 5/5GuidedFull ownership ### Communication Load 5/5IndependentCollaborative AI insightThis is a senior compliance-security role involving federal authorization requirements, detailed RMF artifacts, and audit scrutiny for a veteran-facing system. Success requires independently coordinating multiple stakeholders while translating technical control implementation into defensible evidence and documentation. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job medianMarket rate$120,000US market range$100k–$145k0$160k AI insightThe disclosed US wage range is $100,000 to $140,000 annually, with a midpoint of $120,000. This is broadly competitive for an experienced federal ATO/RMF specialist; the estimated US market range is approximately $100,000 to $145,000 annually, depending on clearance requirements, federal agency experience, and technical depth. ## Core skills Skills and capabilities most closely associated with this opportunity. [Authority to Operate (ATO)](https://jobicy.com/jobs?search_keywords=Authority%20to%20Operate%20ATO.md)[Risk Management Framework (RMF)](https://jobicy.com/jobs?search_keywords=Risk%20Management%20Framework%20RMF.md)[Federal cybersecurity compliance](https://jobicy.com/jobs?search_keywords=Federal%20cybersecurity%20compliance.md)[Continuous monitoring](https://jobicy.com/jobs?search_keywords=Continuous%20monitoring.md)[System Security Plans (SSPs)](https://jobicy.com/jobs?search_keywords=System%20Security%20Plans%20SSPs.md)[Plans of Action and Milestones (POA&Ms)](https://jobicy.com/jobs?search_keywords=Plans%20of%20Action%20and%20Milestones%20POAMs.md)[Security Assessment Reports (SARs)](https://jobicy.com/jobs?search_keywords=Security%20Assessment%20Reports%20SARs.md)[Privacy Impact Assessments (PIAs)](https://jobicy.com/jobs?search_keywords=Privacy%20Impact%20Assessments%20PIAs.md)[Zero Trust Architecture](https://jobicy.com/jobs?search_keywords=Zero%20Trust%20Architecture.md)[Security control assessments](https://jobicy.com/jobs?search_keywords=Security%20control%20assessments.md) Sample interview questionsDescribe your approach to leading an ATO lifecycle for a federal information system.I begin by confirming the system boundary, data types, authorization requirements, and control baseline. I build a documentation and evidence plan with clear owners and milestones, coordinate control implementation and assessment activities, manage POA&M remediation, and maintain continuous-monitoring artifacts after authorization. How do you ensure an SSP remains accurate as a system changes? I integrate SSP updates into the change-management process so material architectural, hosting, interface, or control changes trigger a review. I work with engineering to validate control narratives and evidence, track updates in a controlled repository, and periodically reconcile the SSP against the current environment. What is your process for managing POA&Ms? I document the finding, affected control, risk, root cause, remediation owner, milestones, and required validation evidence. I hold regular status reviews, escalate blocked high-risk items, verify remediation with objective evidence, and ensure closure decisions are traceable and approved. How would you explain Zero Trust requirements to an engineering team? I would translate the principles into implementable practices such as strong identity controls, least privilege, device and workload posture checks, segmentation, encryption, centralized logging, and continuous verification. I would map those practices to applicable controls and collaborate on a practical implementation sequence that supports delivery timelines. How do you prepare for a security assessment or audit? I start with the assessment scope and control inventory, then conduct an evidence-readiness review with control owners. I validate that artifacts are current, reproducible, and tied to the implemented system; conduct mock interviews or walkthroughs when useful; and maintain a tracker for gaps, owners, due dates, and final responses. Oddball believes that the best products are built when companies understand and value the things they are working on. We value learning and growth and the ability to make a big impact at a small company. We believe that we can make big changes happen and improve the daily lives of millions of people by bringing quality software to the federal space. We are seeking an experienced ATO Specialist to lead security authorization and compliance efforts for the VA Chatbot program. In this role, you’ll own and drive the Authority to Operate (ATO) lifecycle for a veteran-facing system, partnering closely with engineering, program leadership, and government stakeholders to maintain a strong, audit-ready security posture while supporting ongoing delivery. What you’ll be doing: * Lead and manage the ATO, reauthorization, and Continuous Monitoring lifecycle for the VA Voicebot system * Serve as the primary security point of contact for the program, coordinating with VA stakeholders and internal leadership * Prepare, maintain, and update required security and privacy artifacts, including System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), Security Assessment Reports (SARs), Privacy Impact Assessments (PIAs), and supporting evidence * Partner with engineering and program management teams to ensure security controls are properly implemented, documented, and maintained in alignment with RMF and VA security policy * Coordinate control assessments, evidence collection, and responses to audit or assessment findings * Advocate for and support adoption of security best practices, including Zero Trust Architecture (ZTA) concepts, to strengthen the platform’s overall security posture What you’ll bring: * Proven experience leading ATO processes for federal information systems * Strong working knowledge of the Risk Management Framework (RMF) and federal security requirements * Demonstrated experience producing and maintaining federal security documentation, including SSPs, POA&Ms, PIAs, and SARs * Familiarity with Zero Trust Architecture principles and how they apply within federal systems * Performs other related duties as assigned. Requirements: * Applicants must be authorized to work in the United States. In alignment with federal contract requirements, certain roles may also require U.S. citizenship and the ability to obtain and maintain a federal background investigation and/or a security clearance. Education: * Bachelor’s degree Benefits: * Fully remote * Yearly stipend * Comprehensive Benefits Package * Company Match 401(k) plan * Flexible PTO, Paid Holidays Oddball is an Equal Opportunity Employer and does not discriminate against applicants based on race, religion, color, disability, medical condition, legally protected genetic information, national origin, gender, sexual orientation, marital status, gender identity or expression, sex (including pregnancy, childbirth or related medical conditions), age, veteran status or other legally protected characteristics. Any applicant with a mental or physical disability who requires an accommodation during the application process should contact an Oddball HR representative to request such an accommodation by emailing [hello@Oddball.io](mailto:hello@Oddball.io) Compensation: At Oddball, it’s important each employee is compensated competitively and fairly. In alignment with state legal requirements. A range for the included position is listed below. Be advised, actual offer details are determined by job category, job location, and candidate skill level. United States Wage Range: $100,000 – $140,000 Show more [Apply now >](https://jobicy.com/jobs/153774-ato-specialist.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. Matched by job category10 related opportunities[Cybersecurity](https://jobicy.com/categories/cybersecurity.md) [Browse all jobs](https://jobicy.com/jobs.md) * ![DeleteMe logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/c26c546a-221.png) DeleteMe Sep 21 ### [Privacy Advisor](https://jobicy.com/jobs/153793-privacy-advisor.md) DeleteMe is the leader in proactive privacy protection. We help Individuals, Families, Businesses and Security teams reduce their human attack surface by continuously monitoring and removing exposed personal data (PII)… * ![DuckDuckGo logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/11/ab8415dd5798a360323ce06beaf30c35.png) DuckDuckGo Sep 21 ### [Senior Web Security Engineer, Browser Platform](https://jobicy.com/jobs/151281-senior-web-security-engineer-browser-platform.md) Who We Are Hi, we’re DuckDuckGo, the online protection company and remote-first team of 300+ on a mission to raise the standard of trust online. Founded in 2008 and profitable… * ![Fastly logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/10/127f9e4bbbdb8767bef358a23bf7f73d.jpeg) Fastly Sep 20 ### [Senior Security Technical Account Manager](https://jobicy.com/jobs/153750-senior-security-technical-account-manager.md) Fastly helps people stay better connected with the things they love. Fastly’s edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and… * ![SkySlope logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2022/01/1e0d9f0517a4959cdef118a420f873a6.jpeg) SkySlope Sep 20 ### [Security Engineering Manager](https://jobicy.com/jobs/153718-security-engineering-manager.md) OUR ORIGIN STORY 🎂 In 2011 SkySlope started as an idea born at the kitchen table of our CEO, with just him and two others. Headquartered in Sacramento, California, we… * ![OpenAI logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2023/03/0523b13262b12c215d8009938f5c14f1.jpeg) OpenAI Sep 20 ### [Security Engineer, Insider Threat Detection & Response](https://jobicy.com/jobs/153709-security-engineer-insider-threat-detection-response.md) About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Security team protects OpenAI’s technology, people, and products…. * ![1Password logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/09/WRILS-200909195848-296323.png) 1Password Sep 20 ### [Senior Security Engineer, Incident Response](https://jobicy.com/jobs/153700-senior-security-engineer-incident-response.md) 1Password is growing. We’ve surpassed $400M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up… * ![OpenAI logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2023/03/0523b13262b12c215d8009938f5c14f1.jpeg) OpenAI Sep 20 ### [Senior Technical Program Manager – Security](https://jobicy.com/jobs/151221-senior-technical-program-manager-security.md) About the Team OpenAI builds powerful AI systems like ChatGPT, the OpenAI API, and enterprise products that serve millions of users across the globe. As we scale, securing our infrastructure,… * ![OpenAI logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2023/03/0523b13262b12c215d8009938f5c14f1.jpeg) OpenAI Sep 20 ### [Software Engineer, Security Observability](https://jobicy.com/jobs/151224-software-engineer-security-observability.md) About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Security team protects OpenAI’s technology, people, and products…. * ![Synthesia logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/c69aad11-221.webp) Synthesia Sep 20 ### [Application Security Engineering Manager](https://jobicy.com/jobs/146803-application-security-engineering-manager.md) Synthesia is the world’s leading AI video platform for business, used by over 90% of the Fortune 100. Founded in 2017, the company is headquartered in London, with offices and… * ![Roboflow logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/8cd75e4b-221.webp) Roboflow Sep 19 ### [Security Engineer](https://jobicy.com/jobs/153639-security-engineer-2.md) Who We Are Our mission is to make the world programmable. Sight is one of the key ways we understand the world, and soon this will be true for the…