Defensive Cyber Ops Engineer & Incident Response

Mitre Corporation; Colorado Springs (CO); On-site; USD 159,000 - 238,000; Full time

Job summary

MITRE in Colorado Springs seeks a seasoned cybersecurity professional to lead defensive cyber operations initiatives, threat hunting, and incident response within a mission-driven environment. You will develop practical training, apply MITRE ATT&CK, and enhance SOC detections and workflows for government sponsors.

The role requires a Top Secret clearance, up to 25% travel, and on-site presence at least 3 days per week, with opportunities to influence national security programs and adopt

Qualifications

• Minimum 8 years of related experience with a Bachelor's; or 6 years with a Master’s; or 3 years with a PhD; or equivalent.
• Bachelor’s degree in Computer Science, Cybersecurity, Data Science, or a related field.
• Strong knowledge of incident response operations and their application.
• Experience with generative AI or AI-enabled cybersecurity technologies.
• Experience creating technical training content for cybersecurity audiences.
• Excellent technical writing, presentation, and facilitation skills.
• Willingness to travel up to 25% including international locations.
• Eligible for a Top Secret U.S. Government security clearance; U.S. citizenship required.
• On-site presence required at least 3 days per week.

Responsibilities

• Provide SME guidance to government Sponsors on SOC operations, governance, and processes.
• Translate complex concepts into practical training aligned with sponsor needs.
• Develop hands-on training scenarios reflecting real incident response challenges.
• Help sponsors improve incident response plans, playbooks, and workflows.
• Apply MITRE ATT&CK to characterize adversary behavior and strengthen defenses.
• Design and refine detections, analytics, and dashboards; integrate data sources into SIEM.
• Analyze telemetry to determine incident scope, inform containment and remediation.
• Assess SOC capabilities and identify gaps to improve sponsor priorities.
• Contribute to post-incident reviews and lessons learned for procedures and readiness.
• Research AI techniques with an emphasis on practical, cost-effective applications.

Skills

Defensive cyber operations

Threat hunting

Incident response

Generative AI in security

Technical training content development

Security analytics

SIEM/EDR/SOAR

Education

Bachelor's degree in Computer Science

Bachelor's degree in Cybersecurity

Tools

Splunk

Elastic/ELK

Job description

MITRE in Colorado Springs seeks a seasoned cybersecurity professional to lead defensive cyber operations initiatives, threat hunting, and incident response within a mission-driven environment. You will develop practical training, apply MITRE ATT&CK, and enhance SOC detections and workflows for government sponsors.

The role requires a Top Secret clearance, up to 25% travel, and on-site presence at least 3 days per week, with opportunities to influence national security programs and adopt