Cyber Professionals Program

At MITRE, your passion fuels work that impacts our nation and improves lives. This is where your skills strengthen national security, cybersecurity, health, transportation, and citizen services. We’re a nonprofit engineering, applied research, and advanced technology organization working in the public interest. With objectivity and integrity at our core, we lead federally funded research and development centers for U.S. government agencies - collaborating with industry and academia to deliver integrated, high-impact solutions that advance our nation’s health, security, and prosperity.

Our people tackle the toughest technical challenges, supported by competitive benefits, meaningful career development, and a culture of innovation, collaboration, and technical excellence. Choose MITRE for a career with purpose - and help shape the future.

Launch your cybersecurity career through MITRE's Cyber New Professionals (CNP) Program. You'll tackle complex national cybersecurity challenges alongside leading experts while gaining hands-on experience, developing new skills, and building your professional network.

• Structured onboarding to MITRE, its culture and organizational structure, and the CNP program
• Varied project experience that builds broad cybersecurity expertise and depth in your areas of interest
• Curated technical and professional training
• Mentorship from MITRE cybersecurity experts
• A cohort of early-career peers and networking opportunities across MITRE

CNP is a two-year program for staff at the beginning of their cybersecurity careers, including people who are new to many of the topics below. Project assignments are matched to your skills and interests, as well as project availability. After two years, you will graduate from CNP and transition into another MITRE department.

• Develop threat-informed, intelligence-enabled solutions using MITRE ATT&CK®, MITRE Engage™, and MITRE Caldera to counter advanced adversaries
• Research novel technical ideas, conduct rigorous analysis, and build proofs of concept that inform sponsor decisions
• Apply threat-informed cybersecurity principles to protect critical systems and infrastructure from cyberattacks and other disruptions
• Model and analyze cyber-physical, physical, human, and organizational systems
• Analyze binaries, firmware, embedded systems, and industrial protocols; conduct vulnerability research, fuzzing, crash analysis, and mitigation assessments
• Develop tested, documented, reproducible research software that integrates cybersecurity, artificial intelligence, systems engineering, and domain expertise
• Collaborate with sponsors, vendors, and academia to advance cybersecurity practices

• Threat operations and analysis: adversary emulation; threat intelligence; defensive operations; deception and adversary engagement; cyber effects; analytics; malware analysis; forensics; assessments; and reverse engineering
• Security architecture, trust, and governance: cloud security; cross-domain solutions; cryptography and trust; enterprise security architecture; identity, credentialing, and access management; privacy; strategy and governance; and supply-chain security
• Critical and connected systems: critical infrastructure resiliency and safety; cyber resiliency and safety;
  Internet of Things (IoT) and operational technology (OT) security; OT engineering and response; modeling and simulation; adversary emulation; and countermeasures
• Software and device security: security automation and management; software assurance; vulnerability research and exploitability analysis; and embedded, wireless, radio frequency (RF), and cellular security
• Systems and emerging technology: autonomous cyber;…