Threat Emulation and Exercises Capability Area Lead

MITRE · McLean, VA · Yesterday

OTHR$173k–$216k/yrFull-time

About the role

At MITRE, you can have a meaningful work and a fulfilling life. MITRE is different from most technology companies, as a not-for-profit corporation chartered to work for the public interest, with no commercial conflicts to influence what we do. The R&D centers we operate for the government create lasting impact in fields as diverse as cybersecurity, healthcare, aviation, defense, and enterprise transformation.

The Cyber Operations Division (L510) is seeking a Capability Area Lead (CAL) for the Tier 3 Threat Emulation and Exercises Capability Area. This capability area will be part of the Cyber Intelligence Tier 2 capability within the Tier 1 Cyber Operations Technologies capability.

Responsibilities

The CAL is responsible for developing and executing the strategy for the capability. This is a leadership role that requires close collaboration with department and division leadership, other CALs, staff across the company working in the domain, relevant Research Program Leads, and portfolio, and program division staff with sponsor opportunities related to the capability area.

Guiding capability area strategy and coordination: building and executing the capability strategy, prioritizing research, identifying and promoting re-usable capabilities, and ensuring the quality of work done in this area.
Driving impact across the work program: representing the capability area, developing and delivering sponsor briefings, shaping and helping to staff work to meet the needs of the sponsor, and promoting external publication and sponsor presentations.
Fostering a community of excellence and innovation: organizing TEMs, trainings, and growing the division's skillset, engaging with the internal R&D program, and mentoring staff.

Qualifications

Typically requires a minimum of 10 years of related experience with a Bachelor's degree; or 8 years and a Master's degree; or a PhD with 5 years' experience; or equivalent combination of related education and work experience.

Understanding of the missions, domains, and challenges of cybersecurity work with MITRE sponsors.
Excellent written, oral, and interpersonal communication skills and a keen desire to learn.
Knowledge of ATT&CK, Caldera, ATT&CK Evaluations, and MITRE's work in threat-informed defense.
Experience scoping and conducting adversary emulation, simulation, or purple teaming.
Experience with hands-on red teaming, penetration testing, and other offensive security operations.
Experience designing and leading threat-driven cyber exercises.
Active Top Secret/SCI clearance.

Preferred Qualifications

Experience creating offensive security tools, malware implants, or other red team capabilities in one or more programming languages.
Demonstrated track record building strong internal and external partnerships.

Pay and Schedule