Principal Cyber Operations Infrastructure Engineer - McLean, United States - MITRE

Description

Why choose between doing meaningful work and having a fulfilling life? At MITRE, you can have both. That's because MITRE people are committed to tackling our nation's toughest challenges—and we're committed to the long-term well-being of our employees. MITRE is different from most technology companies. We are a not-for-profit corporation chartered to work for the public interest, with no commercial conflicts to influence what we do. The R&D centers we operate for the government create lasting impact in fields as diverse as cybersecurity, healthcare, aviation, defense, and enterprise transformation. We're making a difference every day—working for a safer, healthier, and more secure nation and world. Our workplace reflects our values. We offer competitive benefits, exceptional professional development opportunities, and a culture of innovation that embraces diversity, inclusion, flexibility, collaboration, and career growth. If this sounds like the choice you want to make, then choose MITRE—and make a difference with us.

Department Summary:

Do you have a Cyber Warfare Operations background or Cyber/ Digital Network Exploitation Analyst and an interest in Operational Technology (OT) or Control Systems? Have you learned about or worked with OT/Control Systems and have an interest in supporting a Deterrence mission set? The Cyber Physical Deterrence Technologies (L543) department is focused on capabilities and technologies designed to deter our adversaries from holding our infrastructure at risk. This includes technical deterrence capabilities such as forensics and attribution, device countermeasures, adversary emulation, and deception capabilities. Policy-based capabilities also play a critical role in the execution of the deterrence mission. Development of normative behaviors and well-defined coordinated response options, for example, are achieved by reducing the ambiguity surrounding cybersecurity capabilities possessed, and the consequences for leveraging these capabilities against global infrastructure. L543 examines both domestic and foreign control systems and weapons systems technologies for hardware and software weaknesses. CIPIC views deterrence as a capability achieved in a coordinated fashion using both technical and non-technical means; the Policy Support core LOE is heavily engaged by L543.

Job Description:

We are building a team of highly skilled cyber professionals to work in critical infrastructure spaces, focusing on both offensive and defensive cyber operations. We are seeking a talented Mid-Career Cyber Operator with a strong background in offensive and defensive cyber operations to join our dynamic team focused on research and development in critical infrastructure security. This position offers a unique opportunity to contribute to cutting-edge projects aimed at advancing cybersecurity capabilities in critical infrastructure sectors. The ideal candidate will have experience as an Interactive On-Net (ION) operator and/or graduates of NSA's Remote Interactive Operator Training (RIOT) Course, coupled with significant experience in critical infrastructure environments.

• Offensive Cyber Operations: Conduct research and development of innovative cyber attack techniques targeting adversaries and threat actors. Prototype and test new tools and methodologies for offensive cyber operations in critical infrastructure environments. Collaborate with cross-functional teams to refine and enhance offensive capabilities based on emerging threats and vulnerabilities.
• Defensive Cyber Operations: Lead research initiatives to develop and evaluate defensive strategies and technologies for protecting critical infrastructure assets. Design and implement advanced defensive measures to detect, respond to, and mitigate cyber threats and attacks. Stay abreast of industry trends and best practices in defensive cyber operations to inform research efforts and solution development.
• Critical Infrastructure Experience: Apply research expertise to address the unique cybersecurity challenges facing critical infrastructure sectors. Investigate sector-specific threats and vulnerabilities and develop mitigation strategies to enhance resilience. Collaborate with industry partners and regulatory bodies to identify research priorities and drive innovation in critical infrastructure security.
• Programming Languages: Utilize programming skills to develop custom tools and scripts for research and development purposes. Experiment with various programming languages such as Go, Python, PowerShell, and C/C++ to prototype and implement cyber solutions.
• Modeling Tools: Leverage modeling and simulation tools to simulate cyber-attacks and assess their impact on critical infrastructure systems. Explore the use of network analysis tools and packet sniffers to analyze cyber activity and identify patterns and trends.

Basic Qualifications:

• Must have a Top-Secret Security Clearance with SCI
• Advanced degree in Computer Science, Cybersecurity, or related field preferred.
• Typically requires a minimum of 10 years of related experience with a bachelor's degree; or 7 years and a master's degree; or a PhD with 4 years' experience; or equivalent combination of related education
• Minimum of 5 years of experience in cyber operations.
• Understanding in conducting R&D projects in critical infrastructure security.
• Solid programming skills in languages such as Go, Python, PowerShell, or C/C++.
• Experience with modeling and simulation tools such as Wireshark, Metasploit, or Cobalt Strike for offensive operations.
• Familiarity with network traffic analysis tools and packet sniffers for monitoring and analyzing cyber activity.
• Basic understanding of Test and Evaluation for Cyber tools.
• Excellent communication skills and the ability to present complex technical concepts to diverse audiences.
• Proven track record of delivering innovative solutions and driving research initiatives forward.

Preferred Qualifications:

• Top Secret Security Clearance with SCI.
• RIOT course completion, or former ION certification.
• Demonstrated expertise in conducting R&D projects in critical infrastructure security.
• Solid programming skills in languages such as Go, Python, PowerShell, or C/C++.
• Demonstrated expertise of using modeling and simulation tools (Cameo, Matlab etc.).

This requisition requires the candidate to have a minimum of the following clearance(s):

This requisition requires the hired candidate to have or obtain, within one year from the date of hire, the following clearance(s):

Work Location Type:

MITRE is proud to be an equal opportunity employer. MITRE recruits, employs, trains, compensates, and promotes regardless of age; ancestry; color; family medical or genetic information; gender identity and expression; marital, military, or veteran status; national and ethnic origin; physical or mental disability; political affiliation; pregnancy; race; religion; sex; sexual orientation; and any other protected characteristics. For further information please visit the Equal Employment Opportunity Commission website EEO is the Law Poster and Pay Transparency.

MITRE intends to maintain a website that is fully accessible to all individuals. If you are unable to search or apply for jobs and would like to request a reasonable accommodation for any part of MITRE's employment process, please email

Copyright 2024, The MITRE Corporation. All rights reserved. MITRE is a registered trademark of The MITRE Corporation. Material on this site may be copied and distributed with permission only.