Cyber Threat Intelligence for Operational Technology (OT) and Cr with Security Clearance

Why choose between doing meaningful work and having a fulfilling life? At MITRE, you can have both. That's because MITRE people are committed to tackling our nation's toughest challenges-and we're committed to the long-term well-being of our employees. MITRE is different from most technology companies. We are a not-for-profit corporation chartered to work for the public interest, with no commercial conflicts to influence what we do.

The R&D centers we operate for the government create lasting impact in fields as diverse as cybersecurity, healthcare, aviation, defense, and enterprise transformation. We're making a difference every day-working for a safer, healthier, and more secure nation and world. Our workplace reflects our values. We offer competitive benefits, exceptional professional development opportunities for career growth, and a culture of innovation that embraces adaptability, collaboration, technical excellence, and people in partnership.

If this sounds like the choice you want to make, then choose MITRE - and make a difference with us. The Modeling, Intelligence, and Simulation for Critical Infrastructure Department (L542) is committed to protecting and strengthening our nation's critical infrastructure. We analyze infrastructure systems and adversary threats to inform risk mitigation and drive stakeholder decisions. Our work integrates expertise in critical infrastructure, cybersecurity, and all-source intelligence, leveraging technical skills across MITRE to develop analytical tools and models that support intelligence collection, risk assessment, mission assurance, and system interoperability.

We focus on full-spectrum cyber operations, including advancing defensive operations to secure both civilian and military infrastructure. Our team develops and maintains MITRE technologies for OT cybersecurity, conducts critical infrastructure assessments, and collaborates with government sponsors on research, lab test environments, and strategic policy guidance. We share our thought leadership within MITRE and across the industry through conferences, presentations, and publications, driving the state-of-the-art in cybersecurity for operational technologies.

Our team includes experts in Operational Technology (Detection Engineers, Embedded Device Specialists, Cybersecurity Experts), Cyber Intelligence, Cyber Policy, and Modeling/Simulation. This diverse expertise allows us to deliver tailored solutions that address the unique needs of government and private sector stakeholders focused on operational technologies in critical infrastructure.

Roles & Responsibilities :
* Apply cyber threat intelligence expertise to assist sponsors or private owner/operators in securing critical infrastructure and performing cyber operations.

* Guide government sponsors or private owner/operators in building and advancing their cyber threat intelligence capabilities and programs.

* Track and analyze adversary tactics, techniques, and procedures (TTPs) relevant to industrial control systems (ICS), Operational Technology (OT), and space system OT, impacting critical infrastructure and national security missions.

* Support cyber threat modeling, risk assessments, and mission impact analyses for critical infrastructure and space systems based on unclassified and classified sources.

* Fuse multiple intelligence sources to develop products and recommendations for sponsors to support mission assurance and risk-informed decision-making.

* Monitor and analyze emerging threats, vulnerabilities, and supply chain risks affecting ICS/OT and Space OT technologies.

* Serve as a subject matter expert (SME) in cyber threat intelligence with a focus on ICS/OT-relevant threats, working closely with OT engineers and domain experts.

* Brief sponsors and senior leaders on threat trends, risks, and mitigation strategies to enhance mission assurance.

* Produce and deliver artifacts and strategic briefings that synthesize classified and unclassified reporting into clear, decision-focused insights for senior leaders.

* Partner with sponsors to identify key intelligence gaps, prioritize collection, and provide feedback to collectors to improve coverage of priority threats.

* Contribute to thought leadership (e.g., white papers, best practice guides, methodologies) on threat-informed defense, cyber risk assessment, and CTI tradecraft for critical infrastructure.

Basic Qualifications:

* Typically requires a minimum of 5 years of related experience with a bachelor's degree; or 3 years and a master's degree; or a PhD; or equivalent combination of related education and work experience.

* Degree in Computer Science, Cybersecurity, Information Systems, Intelligence Studies, Strategic Intelligence, or related field.

* Deep understanding of adversary TTPs, including frameworks and models such as ATT&CK, SPARTA, Diamond Model, and Cyber Kill Chain.

* Experience with or strong interest in industrial control systems (ICS), Operational Technology (OT), SCADA environments,…