Operational Technology (OT) Adversary Emulation Engineer

About the role

The CI Assessments, Analytics, and Resiliency department (L541) at MITRE focuses on defending and strengthening the nation's critical infrastructure. This includes threat-informed risk assessment and mitigation, adversary hunting, adversary emulation, and detection engineering with a special focus on operational technology (OT).

Responsibilities

• Applying adversary emulation and protocol analysis expertise in support of sponsors.
• Leading and developing adversary emulation capabilities like Caldera for OT.
• Managing small tasks and projects.
• Shaping and developing strong sponsor relationships.
• Providing mentorship to junior staff.
• Generating ideas for research to improve cybersecurity for critical infrastructure.

Requirements

• Bachelor’s Degree or higher in Electrical Engineering, Computer Science, Software Engineering, or related field and:
  • At least 8 years with Bachelor’s;
  • At least 6 years with Master’s;
  • or At least 3 years with PhD of successful experience in OT cybersecurity or related field.
• Experience in OT cybersecurity, adversary emulation, protocol analysis, software development, and/or process control.
• Ability to work with others to solve challenging technical problems.
• Experience managing projects.
• Experience with programming in Python.
• Experience working with federal departments and agencies or their stakeholders, e.g., state/local/tribal/territorial governments and critical infrastructure organizations.
• Experience with red, blue, and purple teaming using breach and attack simulation tools, especially experience with Caldera.
• Experience working with control systems in a critical infrastructure environment (manufacturing, power plant, water/wastewater, or equivalent) with working knowledge of OT, ICS, SCADA, PLCs, DCS, IEDs, Industrial Firewalls, or DCS and related hardware and software.
• Experience with OT protocols such as Siemens S7, CAN, HART, OPC UA, DLSM/COSEM, MQTT, LonWorks, ICCP, IEC 61850, IEC 60870-5-101/104, DNP3, Profinet, ENIP/CIP, Modbus, and/or BACnet.
• Experience in software engineering and development in Python and other languages. Knowledge of non-SQL databases.
• Active Top Secret Clearance.

Qualifications

• Bachelor’s Degree or higher in Electrical Engineering, Computer Science, Software Engineering, or related field.
• At least 8 years with Bachelor’s; At least 6 years with Master’s; or At least 3 years with PhD of successful experience in OT cybersecurity or related field.
• Experience in OT cybersecurity, adversary emulation, protocol analysis, software development, and/or process control.
• Ability to work with others to solve challenging technical problems.
• Experience managing projects.
• Experience with programming in Python.
• Experience working with federal departments and agencies or their stakeholders, e.g., state/local/tribal/territorial governments and critical infrastructure organizations.
• Experience with red, blue, and purple teaming using breach and attack simulation tools, especially experience with Caldera.
• Experience working with control systems in a critical infrastructure environment (manufacturing, power plant, water/wastewater, or equivalent) with working knowledge of OT, ICS, SCADA, PLCs, DCS, IEDs, Industrial Firewalls, or DCS and related hardware and software.
• Experience with OT protocols such as Siemens S7, CAN, HART, OPC UA, DLSM/COSEM, MQTT, LonWorks, ICCP, IEC 61850, IEC 60870-5-101/104, DNP3, Profinet, ENIP/CIP, Modbus, and/or BACnet.
• Experience in software engineering and development in Python and other languages. Knowledge of non-SQL databases.
• Active Top Secret Clearance.

Skills

• Adversary emulation and protocol analysis expertise.
• Software development skills in Python and other languages.
• Experience with OT protocols.
• Experience with control systems in critical infrastructure environments.
• Experience with OT cybersecurity.

Benefits

MITRE offers competitive benefits, exceptional professional development opportunities for career growth, and a culture of innovation that embraces adaptability, collaboration, technical excellence, and people in partnership.

Pay

$158,800 - $198,500 - $238,200

Schedule

Hybrid