Overview of Opportunity 

Join the Trusted Electronics & Effects team of Two Six Technologies, a team of dedicated hackers in Arlington, Virginia, where you’ll immerse yourself in cutting-edge vulnerability research on a wide range of unique embedded systems. Working side by side with top-tier CNO developers and hardware engineers, you’ll discover vulnerabilities and create proof of concepts on embedded systems. Our fast-growing roster of government customers relies on us to deliver advanced security solutions, and we’re looking for a Principal Software Reverse Engineer to help us continue pushing boundaries. If you’re passionate about building tools that make a tangible impact on national security, we want you on our team.

Responsibilities Include

• Perform vulnerability research on complex embedded systems
• Take on complex technical problems for which there is often no known answer
• Develop tools and techniques to assist/automate tasks that traditionally require significant manual reverse engineering effort 
• Follow-on development to productize results/PoCs or handoff to developers for productization
• Provide technical leadership and direction on novel research projects, and interface directly with clients/key stakeholders to present findings and determine program direction
• Mentor and develop junior team members through knowledge-sharing, code reviews, and hands-on guidance, fostering their growth

Minimum Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, or a related technical discipline. Equivalent practical experience in security research, reverse engineering, vulnerability research, or exploit development may substitute for a degree.
• Extensive experience developing, debugging, and scripting in C/C++ and Python within Linux command-line environments, with a strong emphasis on low-level programming, memory management, and system interaction for reverse engineering and vulnerability research.
• Experience with reverse engineering and vulnerability research, using tools such as IDA Pro, Binary Ninja, or Ghidra.
• Expertise in one or more of the following:
• Firmware analysis (ARM, MIPS, PowerPC, RTOS).
• Firmware rehosting using emulation tools such as QEMU
• Fuzzing and exploit development.
• Binary obfuscation and anti-analysis techniques.
• Wireless protocols and radio signal analysis.
• File system forensics and fault injection frameworks.
• Experience leading a team of engineers and researchers

Nice If You Have

• Experience in a client-facing technical role
• Experience reverse engineering binary payloads from multiple architectures (ARM, MIPS, TI, x86, x64)
• Experience reverse engineering data payloads at rest (custom file formats) and in flight (live data captures)
• Experience with invasive and non-invasive hardware analysis, including PCB/component identification and hardware manipulation
• Hands-on experience debugging embedded systems using JTAG, UART, oscilloscopes, and logic analyzers

Clearance Requirements:

• Active Top Secret clearance with eligibility/willingness to obtain a Top Secret/SCI clearance. Prefer active TS/SCI with Poly

#LI-JK1

#LI-ONSITE

• Perform the duties of Contractor Program Security Officer (CPSO) in support of our Intelligence Community (IC) customers. 
• Utilize your knowledge and experience supporting IC agencies in personnel, information and physical security while establishing site procedures and successfully carrying out the mission.
• Process and maintain employee clearances, access, visit certifications, badges, document control, briefings, debriefing, security database records, and on-boarding.
• Work with our Government customers to obtain accreditation and approval. Be familiar with the process of submitting Fixed Facility Checklists, Construction Security Plans and Tempest Checklists. 
• Ensure the implementation of security measures and the safeguarding of personnel, facilities, and information through the implementation of security procedures in compliance with the 32 CFR Part 117, National Industrial Security Program Operating Manual (NISPOM) Rule, Intelligence Community Directives (ICDs), Security Executive Agent Directives (SEADs), applicable executive orders, laws, and contractual requirements.
• Establish and maintain strong working relationships with our government customers and well as our internal Two Six teams. Work closely with the Headquarters Security Team in Arlington, VA to ensure consistent policies and procedures across the organization.  
• Responsible for the successful preparation and completion of security inspections and audits by our government customers.    
• Coordinate and monitor highly sensitive aspects of the special security programs, ensuring compliance with government and company security policies and procedures.
• Provide agency-level technical expertise concerning physical security, industrial security and contractor clearance processes.
• Work with the customer on establishing classified network connectivity.

• Bachelor's degree or additional related experience
• 5+ years of related Security Management work experience with IC
• Solid experience with Personnel Security and one or more of the additional security disciplines - Physical, Technical, Cyber, and/or Operational, and the willingness to become proficient in all disciplines
• Practical knowledge of Security Databases such as DISS, e-QUIP and Scattered Castles
• Working knowledge of Intelligence Community Directives (ICD’s) and the ability to integrate the ICD requirements into a successful security program
• Working knowledge of NISPOM 32 CFR Part 117 and ICDs
• Knowledge in management of SCIFs/SAPFs across various government agencies
• Experience writing SOP manuals, procedures and OPSEC plans
• Working knowledge of COMSEC account procedures and in the keying of encryption devices

• Candidate must have an active TS/SCI w/Poly

Project Manager, Information Security

Two Six Technologies is seeking a Project Manager experienced with the U.S. government’s processes for on-boarding, operating, and maintaining software systems on classified networks. This work will include development of artifacts to support relevant Authority to Operate (ATO) processes for operating software in classified systems for the Pulse Suite. 

Known for being the technology that delivers in times of crisis, conflict, and competition, the Pulse Suite includes technology for:

• Outreach to target audiences around the world on the devices they already use
• Planning tools that transform opportunity into action
• Identifying opportunities to take control of the message when adversaries are attempting to control the narrative space

You’ll own the end-to-end process for getting our software authorized for deployment onto DoD and IC systems, and then manage continuous and ongoing certification, accreditation, risk assessment, and security requirements. You’ll be the expert in the certification and continuous authorization process, ensure compliance with government requirements and policies, apply DevSecOps, coordinate security requirements with the product and engineering teams, and create artifacts supporting a secure software development life cycle.

This is a hybrid position with flexibility to manage your day around collaboration with your team. Arlington or Herndon location is required for easy access to secure spaces to address classified security requirements. Some travel (10-20%) will be required to interface with our customers and Two Six employees collaborating on cleared programs. 

We want to hear from you if you are:

• Experienced with running ATO certification processes from end-to-end for IC, DoW, or both
• Experienced with collaborating with tech leads and product managers to define and prioritize security outcomes
• High initiative, with the ability to create momentum in a complex environment
• Highly collaborative and able to collaborate with diverse stakeholders across the company and within our customer base to create buy-in for your process
• Focused on doing what’s best for the product, with a team mentality

What you will do:

• Understand the multiple company products involved in achieving an ATO
• Work with stakeholders inside and outside the company to define a clear list of requirements and actions to achieve ATO certification
• Define the process for collaborating across the company to achieve this outcome
• Work with existing customers in the IC and DoW to identify additional requirements to gain approval for reciprocal ATOs
• Steward a DevSecOps approach with teams building features so that security is designed in
• Support continuous improvements to the system to maintain certification and accreditation status
• Support additional hardware and cybersecurity certification processes from a project management perspective

What you will need (basic qualifications):

• Experience certifying software in both DoW and IC networks
• Experience with products involving advanced analytics, natural language processing, large language models and generative AI
• Experience certifying commercial technologies in addition to government-owned technologies
• Experience with hardware certifications including cybersecurity like FIPS validation
• Interest in supporting US government missions for information operations, intelligence, and targeting

 Clearance Requirement:

        Active TS/SCI with Polygraph

#LI-JB1

Overview of Opportunity 

Two Six Technologies is actively seeking a Front-End Developer motivated to learn and contribute to a growing team that is solving complex problems for our intelligence community.  We work in a fast-paced, collaborative, inclusive, and iterative delivery environment.  A successful candidate will be familiar with and interested in working with modern UI web application frameworks and UI testing.  This position offers the opportunity to provide robust and comprehensive UI features to serve hundreds of daily users.

What you will need:

• 2 - 5 years of practical experience in software engineering
• Minimum 1 year of JavaScript/TypeScript experience
• Bachelor's degree in Systems Engineering, Computer Science, Information Systems, or a related discipline from an accredited college or university
• Experience with the following technologies:
  • TypeScript, JavaScript, CSS/SCSS, HTML5, and modern web frameworks such as Vue.js, React, and/or Angular
• Experience working in collaborative team environments

Nice to haves:

• Experience with JavaScript unit testing (e.g., Jasmine, Karma, or Vitest) and end-to-end testing (e.g., Cypress)
• Experience using Git and Jira in a development workflow
• Experience working in an agile environment
• Experience with web visualization frameworks such as D3.js or Cesium
• Experience with SCSS and Bootstrap
• Knowledge of observer design patterns utilizing RxJS or a similar library
• Knowledge of user-centered design principles and experience with Sketch/Figma or equivalent design tools

Security Clearance:

• Active TS/SCI required. TS/SCI w. Poly preferred

#LI-JS

Two Six Technologies, is building our team and looking for an experienced Automation Tester to support a new opportunity. This role will be primarily responsible for developing and maintaining automated end-to-end, integration and performance tests. 

Responsibilities Include:

• Performs software product testing and investigates possible causes of problems
• Performs manual testing as stop-gap for automated testing
• Develops functional, end-to-end, regression, and performance tests in automated test environments
• Detects and writes software bug reports and feature requests
• Understands, reproduces, troubleshoots product defects and works with developers to determine the best resolution
• Assists in the planning and implementation of testing new features

What you will need:

• 2-5 years of professional software testing experience
• Strong proficiency in automated testing frameworks and methodologies
• Proven experience designing and implementing integration test suites
• Experience with REST API testing and validation
• Proficiency with Cypress or similar end-to-end testing frameworks
• Experience with CI/CD pipeline integration for automated tests
• Knowledge of test design patterns and best practices
• Experience with Git version control and collaborative workflows
• Understanding of software development lifecycle and agile methodologies
• Strong analytical and debugging skills
• Excellent written communication for test documentation and defect reporting
• Experience working collaboratively with development teams

Nice to haves:

• Strong programming skills in JavaScript/TypeScript
• Experience testing microservice architectures
• Familiarity with additional testing frameworks (Playwright, Selenium, Jest, Mocha)
• Experience with API testing tools (Postman, REST, Assured, Supertest)
• Knowledge of performance and load testing tools (k6, JMeter, Gatling)
• Experience with contract testing (Pact, or similar)
• Familiarity with testing in containerized environments (Docker, Kubernetes)
• Experience with test data management and mocking strategies
• Knowledge of accessibility testing (WCAG compliance, axe-core)
• Experience with visual regression tools
• Familiarity with backend technologies (go, Node.js, Python)
• Understanding of security testing principles
• Experience with test reporting and metrics dashboards
• Knowledge of behavior-driven development (BDD) frameworks (Cucumber, SpecFlow)
• Experience mentoring junior test engineers
• Familiarity with cloud test platforms (AWS/C2S) 

Security Clearance:

• Active TS/SCI required. Active TS/SCI w. Polygraph preferred. 

#LI-JS

Overview of Opportunity 

Two Six Technologies is currently seeking Software Developers with experience in web and desktop software and are especially interested in knowledge of cloud development in support of a large, high-visibility enterprise classification application. 

Responsibilities Include:
As a member of our team you will join a dedicated group of engineers who provide troubleshooting and operations support, with a focus on security, containerization, and automation. You will dive deep into technical issues and work diligently to improve the customer experience, including delivery of highly secure cloud-based offerings through applications, services, and consulting. You will create new environments/services/offerings which will involve coordination with outside groups, architecture, security design and creation, including identifying when implementations are not highly available or have defects.

What you will need:

• 2-5 years of professional software development experience
• Strong proficiency with Go programming language and best practices (or other modern programming languages)
• Strong knowledge of Git version control (branching, merging, pull requests)
• Strong knowledge of Git workflows and branching strategies
• Experience with RESTful API design and implementation
• Solid understanding of distributed systems patterns and challenges
• Experience with containerization and Docker
• Strong testing practices including unit, integration, and end-to-end testing
• Experience mentoring junior developers and conducting code reviews
• Excellent collaboration and communication skills

Nice to haves:

• Experience with Angular for frontend development
• Production experience with Kubernetes deployments and management
• Experience with Helm for Kubernetes package management
• Familiarity with WebAssembly and wasmCloud or similar platforms
• Experience configuring and managing Traefik or other API gateways/ingress controllers
• Knowledge of observability tools (logging, metrics, tracing)
• Experience with event-driven architecture and message queues
• Familiarity with cloud platforms (AWS/C2S)
• Understanding of security best practices in microservices

Security Clearance:

• Active TS/SCI required. TS/SCI w. Poly preferred

#LI-JS