Senior Operational Technology (OT) Cybersecurity Engineer

About the role

The CI Assessments, Analytics, and Resiliency department (L541) at MITRE focuses on defending and strengthening our nation’s critical infrastructure. This includes threat-informed risk assessment and mitigation, adversary hunting, adversary emulation, and detection engineering with a special emphasis on operational technology (OT).

Responsibilities

• We work closely with government and critical infrastructure operators to develop requirements for new cyber protection technologies, perform applied research and development activities, and assist in transitioning these technologies to operational use.
• We develop and operationalize cyber sensors and analytic architectures to enhance OT cybersecurity operations, threat-hunting, and forensic analysis.
• We execute technical and programmatic duties in delivering and integrating cyber technologies into stakeholder environments.
• We conduct cyber mission dependency, criticality, mission failure, and adversary cyberattack scenario analyses to inform the design of OT resilient architectures.
• We research, develop, operationalize, evaluate, and improve OT defensive tactics, techniques, and procedures (TTPs) for detecting and responding to cyber threats.
• We conduct attack emulation and deception operations.

Qualifications

• Bachelor’s degree in Chemical Engineering, Computer Engineering, Electrical Engineering, Systems Engineering, or a related technical field, typically with a minimum of 5 years of related industry experience; or a Master’s degree with 3 years of experience; or a PhD with relevant experience; or equivalent combination of education and work experience.
• Experience in multiple areas listed under Responsibilities.
• Must be eligible to obtain and maintain a Top Secret U.S Government issued Security Clearance.
• Preference will be given to candidates with ACTIVE Security Clearances.

Preferred Qualifications

• Hands-on experience with programming PLCs, field instrumentation, in an operational or lab environment.
• Hands-on experience with configuring industrial networks and maintaining a domain in an operational or lab environment.
• Experience designing or modifying OT systems, OT network monitoring, or OT adversary emulation.
• Experience with embedded system firmware or real-time operating systems.
• Proficiency with scripting and software development languages (Python, Java, C/C++, JavaScript, etc.).
• Familiarity with cybersecurity policies and standards, including: NIST SP 800-82, NERC-CIP, DoD Zero Trust Strategy, IEC 62443.
• Familiarity with relevant technologies, such as Operational Technology (OT) Protocols (Modbus, DNP3, ProfiNET, etc.) and related protocols (BACnet, CAN, MIL-STD-1553, etc.) as well as development with OT related tools (ladder logic, IEC 61131, PAC Machine Edition, TIA Portal, etc.) and knowledge of security unique to OT and cyber-physical systems.

Benefits

This position requires a minimum of 3 days a week on-site. MITRE offers competitive benefits, exceptional professional development opportunities, and a culture of innovation that embraces adaptability, collaboration, technical excellence, and people in partnership.