Cybersecurity Engineer, Senior Manager

Two Six Technologies is seeking a visionary Cybersecurity Engineer, Senior Manager to architect, build, and defend the highly secure environments that power our advanced R&D initiatives. We are looking for a true security architect who can seamlessly bridge the gap between rigorous government security frameworks (NIST, STIGs, CMMC) and complex operational engineering. In this role, you will lead the strategic design of our secure infrastructure, guide DevSecOps integration across software projects, and engineer pragmatic, intent-based security solutions. If you excel at deconflicting stringent compliance mandates with real-world engineering challenges, and thrive in a role that spans infrastructure defense, network architecture, and application security, we want you to lead our team.

Preferable locations are San Antonio TX and Arlington VA. The role is considered hybrid, and would require at least 3 days a week in the office at either location.

Key Responsibilities

• Strategic Security Architecture: Architect custom security solutions that deconflict stringent government compliance requirements with critical operational needs. Move beyond standard "box checking" to design risk-optimized, tailored controls.
• Intent-Based Engineering: Engineer alternative technical solutions when literal remediation causes operational failure. Leverage deep system knowledge and industry best practices to meet the core security intent of a framework while maintaining system functionality.
• Design & Implementation: Lead the hands-on technical development, configuration, and deployment of secure IT infrastructure and custom security tools, ensuring all architectures are defensible during an audit.
• Threat Defense & Mitigation Strategy: Develop high-level strategies, playbooks, and architectures for threat detection and incident response. Oversee the vulnerability mitigation lifecycle, guiding the team's efforts so that day-to-day monitoring is handled by staff while the Lead focuses on proactive, structural defense improvements.
• Collaborative Security: Partner with development and IT teams to seamlessly integrate security and compliance into CI/CD pipelines and software development lifecycles while supporting innovation.
• Team Leadership & Mentorship: Direct a small team of security professionals across multiple projects. Mentor junior team members on how to balance strict compliance auditing with pragmatic, operational engineering solutions.

Required Skills & Qualifications

• Education: Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or comparable experience.
• Leadership: Experience managing small interactive teams.  Candidates will be required to task junior reports, and should have strong mentorship skills.
• Strategic Risk & Compliance Mastery: Deep understanding of NIST 800-171, NIST 800-53b, CMMC, and DISA STIGs. Proven ability to interpret the underlying risk objective of a control to engineer solutions that satisfy auditors without breaking operations.
• Advanced Systems Expertise: Deep technical mastery of operating systems (primarily RHEL/Linux). Must possess the system-level knowledge (e.g., Linux internals, process management) required to design custom, defensible security configurations backed by vendor documentation when standard STIG guidance is insufficient.
• Operational Deconfliction: A highly analytical mindset with a track record of identifying conflicts between security mandates and operational uptime, and successfully architecting "semi-custom" solutions that keep risk to an acceptable minimum.
• Network Security Architecture: Strong architectural understanding of secure network paradigms (e.g., Zero Trust, macro/micro-segmentation) and fundamentals. Ability to guide the implementation of complex boundary defenses and validate network security controls.
• Application Security & Code Analysis: High technical competency in application security principles. Must be capable of analyzing SAST tool outputs, architecting defensible arguments for false positives to present to customers, and providing strategic guidance to developers on resolving legitimate vulnerabilities.
• Security Automation: Strategic approach to automating repetitive security operations using scripting and CI/CD pipelines. Proven ability to build self-sustaining security workflows that free up engineering staff to focus on high-complexity problems.
• Clearance:  Eligibility to obtain and maintain a security clearance up to TS/SCI. 

Preferred Experience

• Advanced Code Review: Practical experience reading, reviewing, and defending SAST findings in compiled languages such as Java, Golang, or C and/or interpreted languages like Python or NodeJS.
• DevSecOps & Containerization: Hands-on experience architecting secure CI/CD pipelines and software development workflows utilizing platforms like Jenkins, GitHub, or GitLab. Familiarity with securing OCI-compliant container ecosystems (e.g., Docker) is highly desirable.
• Virtualization & Cloud Architecture: Experience securing, architecting, or managing hyperconverged virtual infrastructure (specifically VMware or Proxmox) and/or cloud-native enterprise environments (e.g., AWS).
• Enterprise Boundary Defense: Practical experience engineering, deploying, or migrating advanced enterprise firewall and network security solutions (e.g., Fortinet).
• Specialized Enclaves & R&D Networks: Proven experience designing, auditing, or managing compliance for research and development (R&D) environments, specifically involving the creation or maintenance of CMMC Level 2 compliant networks.
• AI Security Oversight: Experience implementing security guardrails for teams using AI-assisted coding tools (e.g., Cursor, GitHub Copilot, Gemini).
• Automated Compliance: Ability to translate security mandates into Policy-as-Code to ensure rapid, AI-generated deployments remain compliant with NIST/CMMC frameworks.
• AI Risk Assessment: Practical understanding of the OWASP Top 10 for LLMs and how to mitigate risks related to prompt injection and AI-generated code vulnerabilities.
• Clearance:  Active TS/SCI clearance

Clearance Requirements:

• This position requires eligibility to obtain and maintain a security clearance up to TS/SCI

#LI-MS1

#Hybrid

Cybersecurity Engineer, Senior Manager

Two Six Technologies is seeking a visionary Cybersecurity Engineer, Senior Manager to architect, build, and defend the highly secure environments that power our advanced R&D initiatives. We are looking for a true security architect who can seamlessly bridge the gap between rigorous government security frameworks (NIST, STIGs, CMMC) and complex operational engineering. In this role, you will lead the strategic design of our secure infrastructure, guide DevSecOps integration across software projects, and engineer pragmatic, intent-based security solutions. If you excel at deconflicting stringent compliance mandates with real-world engineering challenges, and thrive in a role that spans infrastructure defense, network architecture, and application security, we want you to lead our team.

Preferable locations are San Antonio TX and Arlington VA. The role is considered hybrid, and would require at least 3 days a week in the office at either location.

Key Responsibilities

• Strategic Security Architecture: Architect custom security solutions that deconflict stringent government compliance requirements with critical operational needs. Move beyond standard "box checking" to design risk-optimized, tailored controls.
• Intent-Based Engineering: Engineer alternative technical solutions when literal remediation causes operational failure. Leverage deep system knowledge and industry best practices to meet the core security intent of a framework while maintaining system functionality.
• Design & Implementation: Lead the hands-on technical development, configuration, and deployment of secure IT infrastructure and custom security tools, ensuring all architectures are defensible during an audit.
• Threat Defense & Mitigation Strategy: Develop high-level strategies, playbooks, and architectures for threat detection and incident response. Oversee the vulnerability mitigation lifecycle, guiding the team's efforts so that day-to-day monitoring is handled by staff while the Lead focuses on proactive, structural defense improvements.
• Collaborative Security: Partner with development and IT teams to seamlessly integrate security and compliance into CI/CD pipelines and software development lifecycles while supporting innovation.
• Team Leadership & Mentorship: Direct a small team of security professionals across multiple projects. Mentor junior team members on how to balance strict compliance auditing with pragmatic, operational engineering solutions.

Required Skills & Qualifications

• Education: Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or comparable experience.
• Leadership: Experience managing small interactive teams.  Candidates will be required to task junior reports, and should have strong mentorship skills.
• Strategic Risk & Compliance Mastery: Deep understanding of NIST 800-171, NIST 800-53b, CMMC, and DISA STIGs. Proven ability to interpret the underlying risk objective of a control to engineer solutions that satisfy auditors without breaking operations.
• Advanced Systems Expertise: Deep technical mastery of operating systems (primarily RHEL/Linux). Must possess the system-level knowledge (e.g., Linux internals, process management) required to design custom, defensible security configurations backed by vendor documentation when standard STIG guidance is insufficient.
• Operational Deconfliction: A highly analytical mindset with a track record of identifying conflicts between security mandates and operational uptime, and successfully architecting "semi-custom" solutions that keep risk to an acceptable minimum.
• Network Security Architecture: Strong architectural understanding of secure network paradigms (e.g., Zero Trust, macro/micro-segmentation) and fundamentals. Ability to guide the implementation of complex boundary defenses and validate network security controls.
• Application Security & Code Analysis: High technical competency in application security principles. Must be capable of analyzing SAST tool outputs, architecting defensible arguments for false positives to present to customers, and providing strategic guidance to developers on resolving legitimate vulnerabilities.
• Security Automation: Strategic approach to automating repetitive security operations using scripting and CI/CD pipelines. Proven ability to build self-sustaining security workflows that free up engineering staff to focus on high-complexity problems.
• Clearance:  Eligibility to obtain and maintain a security clearance up to TS/SCI. 

Preferred Experience

• Advanced Code Review: Practical experience reading, reviewing, and defending SAST findings in compiled languages such as Java, Golang, or C and/or interpreted languages like Python or NodeJS.
• DevSecOps & Containerization: Hands-on experience architecting secure CI/CD pipelines and software development workflows utilizing platforms like Jenkins, GitHub, or GitLab. Familiarity with securing OCI-compliant container ecosystems (e.g., Docker) is highly desirable.
• Virtualization & Cloud Architecture: Experience securing, architecting, or managing hyperconverged virtual infrastructure (specifically VMware or Proxmox) and/or cloud-native enterprise environments (e.g., AWS).
• Enterprise Boundary Defense: Practical experience engineering, deploying, or migrating advanced enterprise firewall and network security solutions (e.g., Fortinet).
• Specialized Enclaves & R&D Networks: Proven experience designing, auditing, or managing compliance for research and development (R&D) environments, specifically involving the creation or maintenance of CMMC Level 2 compliant networks.
• AI Security Oversight: Experience implementing security guardrails for teams using AI-assisted coding tools (e.g., Cursor, GitHub Copilot, Gemini).
• Automated Compliance: Ability to translate security mandates into Policy-as-Code to ensure rapid, AI-generated deployments remain compliant with NIST/CMMC frameworks.
• AI Risk Assessment: Practical understanding of the OWASP Top 10 for LLMs and how to mitigate risks related to prompt injection and AI-generated code vulnerabilities.
• Clearance:  Active TS/SCI clearance

Clearance Requirements:

• This position requires eligibility to obtain and maintain a security clearance up to TS/SCI

#LI-MS1

#Hybrid

About Misfits Market:

Misfits Market is a mission-driven, high-growth startup dedicated to reducing food waste and making shopping for sustainable, high-quality groceries easier and more affordable. We deliver organic produce, high-quality meats and seafood, plant-based proteins, dairy, bakery, wine, and other grocery items to nearly every zip code in 48 states at up to 30 percent off traditional grocery store prices. In 2022, Misfits Market acquired sustainable e-grocer Imperfect Foods and now leverages its in-house transportation network to deliver directly to consumers with one of the most carbon-efficient grocery delivery models on the market. By tackling inefficiencies in the food system, our passionate and motivated team of problem solvers helps save an average of 500,000 pounds of food per week from waste or lesser outcomes, with an all-time savings of 190+ million pounds of food.

As Misfits we support our customers and mission by embracing our core values of

Prioritizing our Customers                             

Doing more with less

Thinking Differently         

Respecting one another                             

Moving deliberately and quickly                   

Taking initiative and delivering 

About Role:

The Continuous Improvement Engineer is responsible for driving projects from beginning stages to completion while having a significant impact on business needs. As a CI Engineer, you will be responsible for process improvement initiatives around the business operations in logistics and distribution while maintaining high levels of quality, safety, employee morale, cost, and production at the forefront. You will work closely with the field operations teams to implement solutions, coach, and train the operations leadership team and associates. The CI Engineer will be the data resource of the team and will ensures data driven decisions are made.

As we launch new markets and experiment operationally, the CI Engineer ensures we continue to delight our customers and improve our unit economics by collecting, documenting, and instilling best practices across the company. This role will be focused on supporting the Operations team, serving as one of the key team members to launch, improve, and sustain our operational systems. You will be responsible for process design, project management, implementation, and data analysis to sustain your processes.

Additionally, this role will play an integral role in aiding in the expansion of our 3PL business vertical, allowing us to be a fulfillment partner to outside companies who look to leverage our operational and reporting capabilities to improve their supply chain operations and customer service. You will be responsible for helping build business processes to allow for future expansion of this critical business venture for the company.

Responsibilities: 

• Work with cross-functional teams to support the launch of new projects and initiatives across the country, with a specific focus on our West Coast fulfillment operations.
• Maintain a thorough understanding of our Production and Delivery Operations.
• Responsible for supporting the team that manages the start-up, validation, and sustainment of our existing and incoming software and systems.
• Recommend processes, procedures, and modifications to improve production efficiencies, manufacturing techniques and production yields for existing products.
• Determine appropriate skills necessary for equipment/process operability and establishing training requirements.
• Develop and coaches current CI Engineers, developing a deep bench of lean-focused teammates.
• Analyze data, use of basic statistical tools, and use value stream mapping to gain a deeper understanding of processes and identify strategic improvement opportunities.
• Employ a working knowledge of standard-work to ensure every work activity is properly defined, displayed (point-of-use) and accurately followed by every person to enable safety adherence, consistent quality and productivity being achieved.
• Use basic Lean Principles to develop process improvement initiatives.
• Manage a portfolio of lean projects directed at reducing waste and improving quality to provide greater valve; implements such tools as: 5S, KPI, SMED, VSM, and Kaizen.
• Implement such tools as: SPC, Process Capability, Pareto analysis, Fishbone, SMED.
• Create documentation for training materials such as checklists, standard work, and standard operating procedures.
• Communicate plans and other agreements to stakeholders for alignment while listening to feedback and making modifications if appropriate.
• Be a “leader of change”. Practice “Servant Leadership”. This person must be comfortable working with all levels within the organization. They must be able to question the status quo and be a strong communicator.
• Strong analytical, planning, organizational, and time management skills.
• Must maintain satisfactory attendance, to include timeliness and onsite presence at our Fulfillment Centers.

Skills & Qualifications:

• Five-to-seven years of hands-on experience in a manufacturing, warehouse and/or delivery operations environment.
• Bachelor’s degree in industrial engineering, manufacturing engineering, chemical engineering, mechanical engineering, project management or equivalent experience.
• Working knowledge of lean manufacturing principles and practices.
• Minimum of a Yellow Belt Lean Six Sigma Certification is preferred, and capable of providing examples of the use of Lean tools.
• Ability to collaborate and work cross-functionally with a variety of teams including Operations, HR, Supply, Innovation, Customer Care, and Marketing.
• Ability to work both independently and collaboratively, with little supervision and able to work in a changing environment with changing priorities.
• Demonstrated experience recognizing and identifying root causes for subtle differences in processes and data sets.
• Ability to Coach and to practice a very strong and disciplined Lean daily management approach at the point of value adding to enable a continual focus on process improvement to eliminate waste. This includes maintaining visual controls that track only the critical metrics, which tell you whether you are eliminating waste from your value-adding activities.
• Excellent written and verbal communication skills.
• A self-starter attitude and an ability to attack problems with minimal direction.
• Strong Experience using Google Suite and Microsoft Office applications, and project management software such as Jira and Confluence.
• Skilled in the use of MS Excel, MS Word, MS PowerPoint at an Intermediate level.
• Skilled in learning new concepts quickly.

Details of Position & Benefits:

• Salary range: $75,000 - $80,000 
• Comprehensive medical, dental, and vision insurance
• 401(k) 
• Annual Misfits grocery box credit of $1200 paid in weekly installments
• Life insurance
• Paid vacation time
• Paid holidays 
• Paid sick days
• Commuter benefits

Please see here for Misfits Market's Job Applicant Privacy Notice.

Required:

• 3+ in Windows desktop application development using Windows App SDK, WinUI (or similar), C#, XAML — and ideally additional experience with native Windows code (C++, Win32/WinRT/COM).
• Deep understanding of Windows application architecture, including interop between managed code (.NET) and native code.
• Proven track record of designing, building, and shipping production-quality desktop applications, with an emphasis on reliability, performance, scalability, and maintainability.
• Strong experience with accessibility APIs on Windows (e.g. Microsoft UI Automation or similar), and a dedication to building accessible and inclusive software.
• Excellent software engineering fundamentals: OOP, design patterns, data structures, algorithms, memory management, multi-threading or asynchronous programming (where relevant).
• Experience leading technical design, mentoring other engineers, conducting code reviews, and making architecture-level decisions.
• Strong communication skills; ability to articulate tradeoffs, collaborate with cross-functional teams, and drive consensus.
• A user-centric mindset: focus on building polished, intuitive, and accessible experiences for end users.

Preferred / Bonus:

• Experience with writing automated tests for UI — unit tests, integration tests, UI automation tests; familiarity with relevant testing frameworks.
• Experience with performance optimization for desktop apps (memory usage, startup time, rendering performance, high-DPI support, responsiveness under load).
• Experience with localization/globalization, right-to-left UI support, internationalization, accessibility for multiple regions.
• Familiarity with telemetry, analytics, crash reporting, logging, and error monitoring in desktop applications.
• Previous experience in shaping CI/CD workflows, release pipelines, and deployment strategies for desktop applications.
• Demonstrated ability to take ownership of feature areas or modules and drive them long-term, including maintenance, refactoring, and technical debt management.

What we offer

• A high-impact role: you will define architecture, shape the future of our Windows product, and directly influence what millions of users see and experience.
• A collaborative, flat-structure engineering culture — you are not just a coder, but a builder and a decision-maker.
• Opportunities to lead — mentor others, steer technical direction, and grow into broader technical leadership (e.g. Tech Lead, Architect).
• Flexibility, autonomy, and responsibility: you define how to solve problems, own features end-to-end, and contribute to long-term product vision.
• A purpose-driven mission: building software that’s reliable, accessible, and user-centered — making a real difference for people.

The United States Based Salary range for this role is: 140,000-200,000 USD/Year + Bonus + Stock depending on experience             

Think you’re a good fit for this job? 

Tell us more about yourself and why you're interested in the role when you apply.
And don’t forget to include links to your portfolio and LinkedIn.

Not looking but know someone who would make a great fit? 
Refer them! 

Speechify is committed to a diverse and inclusive workplace. 
Speechify does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status.

Senior Information Assurance Engineer

Location: Denver, CO (Hybrid), San Antonio, TX (Hybrid), Brooklyn, NY (Hybrid), or Remote (US Based)

About the Role

As the Senior Information Assurance Engineer, you will focus on the technical execution of our cybersecurity compliance and resilience efforts.  You are an independent, self-sufficient expert who drives the Risk Management Framework (RMF) process forward without needing constant oversight.  You will work closely with the team and the RMF Lead to align on team priorities, technical guidance, and the strategic roadmap for sustaining our Authority to Operate (ATO).

Work Model: We prioritize candidates in the Denver, CO, San Antonio, TX, and Brooklyn, NY area, but are open to remote talent.

• Locals: 2 days/week onsite.
• Remote: Quarterly travel for team meetings.

What Success Looks Like:

• 30 Days: Review security architecture and identify critical paths for the upcoming expansions.  Familiarize yourself with the hybrid cloud/on-prem infrastructure, documentation, current workflows and begin analyzing system logs to understand the current baseline.
• 60 Days: Begin gathering and analyzing artifacts for compliance activities such as vulnerability and compliance scans.  Review and update STIG Checklists to ensure technical alignment.
• 90 Days: Assume responsibility for recurring continuous monitoring activities and the submission of related artifacts.  Proactively initiate and support A&A activities in coordination with the RMF Lead.  Begin to review and update system plans and technical documentation. 

What You’ll Do

• Execute and automate technical activities to obtain and maintain multiple Authorities to Operate (ATOs) for systems securing critical infrastructure.
• Define and scale monitoring by refining alerting thresholds and enhancing SIEM dashboards to improve real-time detection capabilities.
• Manage and remediate vulnerabilities by maintaining POA&Ms and implementing automated security patches across hybrid environments.
• Collaborate with Engineering teams to gather system artifacts and ensure security controls are integrated into the development lifecycle.
• Act as a technical liaison during engagements with the AO/AODR, providing risk mitigation guidance and technical context to support the RMF Lead.
• Provide technical expertise to evolve the security roadmap in alignment with customer requirements, company priorities, and new DoD standards.

What You Bring

Required Qualifications:

• Experience: 8+ years in DoD Cybersecurity/Information Assurance roles, with a track record of executing and authoring complex RMF packages to successful ATOs.  Ability to operate autonomously in ambiguous environments while maintaining strict alignment with team priorities.
• Technical Leadership: Expert-level understanding of eMASS and its workflows, NIST 800-53, and the ability to interpret DISA STIGs into technical requirements for developers. Hands-on experience with vulnerability scanning tools (e.g., ACAS/Nessus) and SIEM environments.
• Domain Expertise: Strong understanding of DoD Zero Trust requirements and hands-on experience maintaining security standards within automated CI/CD workflows and DevSecOps environments.
• Clearance: Must be a U.S. Citizen with an active (or ability to obtain) Secret Clearance.
• Compliance: Must be able to obtain a DoD NIPR account/CAC and possess or achieve DoD 8140/8570 IAT Level III (e.g., CISSP, CASP+, or CISM) within 6 months of hire.

Preferred Qualifications:

• Based in the Denver, CO, San Antonio, TX, or Brooklyn, NY area (Hybrid/Remote availability).
• Experience in a "Senior" IA or ISSO capacity for a non-traditional defense contractor or high-growth technology startup.
• Advanced proficiency in scripting (Python, Bash, or PowerShell) or using automation tools to streamline RMF activities.
• Experience with cloud-native security services (e.g., AWS Security Hub, GuardDuty, or Azure Monitor) within GovCloud or IL-4/5 environments.

Our Culture

At Simplesense, we value high-trust autonomy. We look for people who can navigate ambiguity and are driven by the mission.

• Safety & Innovation: You embed security and reliability practices into daily work to drive continuous improvement and mitigate risk.
• People & Communication: You invite vigorous debate and offer "kindly blunt" feedback, always maintaining empathy and assuming noble intent.
• Integrity & Ethics: You build trust by honoring commitments, acting ethically, and resolving conflict through direct, honest communication.
• Strategic Problem Solving: You focus on high-priority issues to create documented, and scalable solutions—avoiding shortcuts.
• Agility: You move quickly to fix small problems, learn from the past, and pivot transparently when the mission requires it.

Compensation and Benefits

Pay Range: $125,000- $155,000 per year. Compensation is determined based on experience, skill level, and location. We review ranges regularly to ensure market competitiveness.