Operational Technology (OT) Adversary Emulation Engineer

About the role

The CI Assessments, Analytics, and Resiliency department (L541) at MITRE focuses on defending and strengthening the nation's critical infrastructure. This includes threat-informed risk assessment and mitigation, adversary hunting, adversary emulation, and detection engineering with a special focus on operational technology (OT).

Responsibilities

• Applying adversary emulation and protocol analysis expertise in support of sponsors.
• Leading and developing adversary emulation capabilities like Caldera for OT.
• Managing small tasks and projects.
• Shaping and developing strong sponsor relationships.
• Providing mentorship to junior staff.
• Generating ideas for research to improve cybersecurity for critical infrastructure.

Requirements

• Bachelor’s Degree or higher in Electrical Engineering, Computer Science, Software Engineering, or related field and:
• At least 8 years with Bachelor’s;
• At least 6 years with Master’s;
• or At least 3 years with PhD of successful experience in OT cybersecurity or related field.
• Experience in OT cybersecurity, adversary emulation, protocol analysis, software development, and/or process control.
• Ability to work with others to solve challenging technical problems.
• Experience managing projects.
• Ability to think critically, work in group settings, and be proactive in pursuing research and problem solving.
• Experience with programming in Python.

Qualifications

• Basic Qualifications:
• Bachelor’s Degree or higher in Electrical Engineering, Computer Science, Software Engineering, or related field.
• At least 8 years with Bachelor’s; At least 6 years with Master’s; or At least 3 years with PhD of successful experience in OT cybersecurity or related field.
• Experience in OT cybersecurity, adversary emulation, protocol analysis, software development, and/or process control.
• Experience managing projects.
• Experience with programming in Python.
• Preferred Qualifications:
• Experience working with federal departments and agencies or their stakeholders, e.g., state/local/tribal/territorial governments and critical infrastructure organizations.
• Experience with red, blue, and purple teaming using breach and attack simulation tools, especially experience with Caldera.
• Experience working with control systems in a critical infrastructure environment (manufacturing, power plant, water/wastewater, or equivalent) with working knowledge of OT, ICS, SCADA, PLCs, DCS, IEDs, Industrial Firewalls, or DCS and related hardware and software.
• Experience with OT protocols such as Siemens S7, CAN, HART, OPC UA, DLSM/COSEM, MQTT, LonWorks, ICCP, IEC 61850, IEC 60870-5-101/104, DNP3, Profinet, ENIP/CIP, Modbus, and/or BACnet.
• Experience in software engineering and development in Python and other languages. Knowledge of non-SQL databases.
• Experience writing research, work, or funding proposals/statements of work.

Skills

• Experience with red, blue, and purple teaming using breach and attack simulation tools, especially experience with Caldera.
• Experience working with control systems in a critical infrastructure environment (manufacturing, power plant, water/wastewater, or equivalent) with working knowledge of OT, ICS, SCADA, PLCs, DCS, IEDs, Industrial Firewalls, or DCS and related hardware and software.
• Experience with OT protocols such as Siemens S7, CAN, HART, OPC UA, DLSM/COSEM, MQTT, LonWorks, ICCP, IEC 61850, IEC 60870-5-101/104, DNP3, Profinet, ENIP/CIP, Modbus, and/or BACnet.
• Experience in software engineering and development in Python and other languages.
• Experience with non-SQL databases.
• Experience writing research, work, or funding proposals/statements of work.

Benefits

This position requires a minimum of the following clearance(s): None

This requisition requires the candidate to have or obtain, within one year from the date of hire, the following clearance(s): Top Secret

Pay

$158,800 - $198,500 - $238,200

Schedule

Hybrid