Operational Technology Cyber SME

Come and help defend the nation in cyberspace! In the Cyber Operations & Analysis Technology Group at MIT Lincoln Laboratory, we research challenging technical problems in cyber security, develop new technologies, and prototype first‑of‑a‑kind systems. We have particular focus on enabling human operators and improving operational systems, orienting our work toward strong practical impact.

We work across a variety of cutting‑edge national‑security applications:

• Quantifying risk posed by adversary cyber threats to key national security missions
• Enhancing the cyber security and resilience of critical infrastructure and other operational technology
• Protecting and defending U.S. weapon systems in cyber contested environments
• Helping the nation’s cyber operators do their jobs better, faster, and at greater scale
• Creating game‑changing capabilities for defensive cyberspace operations

As an interdisciplinary group, we innovate by drawing insights from computer science, software engineering, data engineering, data science, artificial intelligence/machine learning, electrical engineering, mathematics, statistics, physics, and allied technical fields. We collaborate with research partners across MIT, offering frequent opportunities to team and learn in new areas. If you want a career in R&D with the opportunity to have real impact on important problems, join us!

We are seeking an experienced Operational Technology (OT) Cyber Resilience Subject Matter Expert to join our team at MIT Lincoln Laboratory as a Specialist in a technical role. The successful candidate will have a strong background and experience in securing industrial control systems (ICS), SCADA systems, and critical infrastructure environments, as well as experience with OT‑specific security tools and threat analysis.

• Contribute to technical R&D efforts identifying OT security gaps and developing solutions to meet operational needs in critical infrastructure and industrial environments
• Work closely with operational stakeholders to identify technical needs and challenges specific to OT/ICS environments
• Provide expert‑level guidance on OT cyber resilience to technical researchers, government stakeholders, and critical infrastructure owner/operators
• Stay informed of emerging OT‑specific cyber threats and vulnerabilities, including advanced persistent threats and nation‑state sponsored attacks
• Develop and maintain expertise in emerging technologies and techniques relevant for OT security and defense, including Zero Trust principles and techniques, artificial intelligence, secure remote access, asset discovery, and anomaly detection

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related field (Master’s degree preferred)
• Minimum 8 years of experience in operational technology cybersecurity, including experience securing industrial control systems, SCADA systems, or critical infrastructure environments
• Experience with OT security tools and platforms such as Nozomi Networks, Claroty, Dragos, Tenable, or similar solutions for asset discovery, network monitoring, threat detection, and vulnerability management
• Strong understanding of OT/ICS protocols (e.g., Modbus, DNP3, OPC, BACnet, Profinet), industrial networks, and operational technology environments
• Familiarity with OT‑specific cybersecurity frameworks and standards (e.g., IEC 62443, NIST Cybersecurity Framework, NERC CIP)
• Excellent analytical and problem‑solving skills, with the ability to think critically about unique OT security challenges
• Excellent written and oral communication skills, including technical communication for non‑technical audiences
• Ability to work both independently and collaboratively on difficult, open‑ended problems in OT cybersecurity with interdisciplinary technical teams
• Motivation to identify underlying technical problems and investigate solutions proactively

• Experience with programming languages such as Python, C/C++, Rust, and/or Java
• Hands‑on experience with specific industrial sectors…