Two Six Technologies is seeking an Information Systems Security Engineer (ISSE) to lead and execute security engineering activities across complex, enterprise-scale environments. The ideal candidate has deep technical expertise and hands-on experience implementing the NIST Risk Management Framework (RMF) within federal government environments.
Requirements
- Minimum ten (10) years of related cyber security engineering experience
- Proven hands-on Cyber Security Engineer SME, not policy-only or audit-only
- Comfortable working across network, system, platform, and application layers
- Deep understanding of how security controls are actually implemented and validated
- Experience in federal RMF-driven environments
- Able to bridge security, engineering, and compliance effectively
- Experienced in managing security incidents from detection through resolution
- Skilled at balancing immediate incident response needs with long-term security improvements
- Effective collaborator across organizational boundaries during high-pressure security events
- Operate independently as the technical authority for system security engineering
- Demonstrate the ability to provide technical hands-on configuration, validation, and assessment of security controls
- Translate RMF and NIST requirements into real-world technical implementations
- Communicate complex technical security issues clearly to both technical and non-technical stakeholders
- Maintain a strong balance between security compliance and operational practicality
- Lead rapid response to security incidents with minimal guidance
- Demonstrate strong analytical and troubleshooting skills under pressure during active security events
- Effectively communicate incident status, impact, and remediation progress to technical and leadership audiences
- Expert-level experience with NIST Risk Management Framework (RMF) in federal government environments
- Strong knowledge of NIST SP 800-53, NIST SP 800-37, and NIST SP 800-30
- Direct involvement in ATO packages, control implementation, and assessments
- Hands-on experience with Security Information and Event Management (SIEM) platforms
- Demonstrated experience in security incident detection, analysis, and response
- Proven ability to triage security alerts and determine criticality and impact
Benefits
- Medical, dental, and vision insurance
- Life and disability insurance
- Retirement benefits
- Paid leave
- Tuition assistance and professional development
