OT Cyber Threat Intelligence Lead — Onsite, Top Secret

Mitre Corporation; McLean (VA); Presencial; USD 173.000 - 259.000; Jornada completa

Descripción de la vacante

MITRE’s Critical Infrastructure Protection Department seeks an Operational Technology Cyber Threat Intelligence Lead to bridge OT threat intelligence and automated adversary emulation. You will analyze real-world ICS/OT threat patterns and distill them into operational behaviors for Caldera-like platforms.

You will work on emulation, threat tracking of APTs, and guidance for government sponsors to adopt threat-informed defense while collaborating with federal and industry partners.

Formación

• Minimum 10 years related experience with a bachelor’s degree; or 8 years with a master’s; or 5 years with a PhD.
• Degree in Computer Science, Cybersecurity, Information Systems, Intelligence Studies, Strategic Intelligence, or related field.
• 2+ years hands-on OT/ICS/SCADA/Space OT experience beyond enterprise IT security.
• Working understanding of industrial protocols (Modbus TCP, DNP3, OPC UA/DA, Ethernet/IP).
• Experience applying ATT&CK for ICS, SPARTA, or ICS-focused Cyber Kill Chain.

Responsabilidades

• Deconstruct real-world ICS/OT threat intelligence to identify adversary behaviors, target devices, and network patterns.
• Translate OT threat intel into technical requirements and attack flows for OT emulation tooling.
• Track and characterize APTs targeting critical infrastructure using unclassified and classified sources.
• Advise sponsors on OT threat intelligence programs and defense strategies.
• Conduct OT-focused threat modeling and risk assessments using ATT&CK for ICS and SPARTA.
• Deliver actionable briefs, attack flow mappings, and leadership-level briefings.

Conocimientos

OT/ICS threat analysis

Threat modeling

Emulation collaboration

Red team collaboration

Educación

Bachelor’s degree in Computer Science / Cybersecurity / Information Systems

Master’s or PhD preferred

Herramientas

Caldera

Wireshark

Enterprise SIEM

OPC UA/DA

Descripción del empleo

MITRE’s Critical Infrastructure Protection Department seeks an Operational Technology Cyber Threat Intelligence Lead to bridge OT threat intelligence and automated adversary emulation. You will analyze real-world ICS/OT threat patterns and distill them into operational behaviors for Caldera-like platforms.

You will work on emulation, threat tracking of APTs, and guidance for government sponsors to adopt threat-informed defense while collaborating with federal and industry partners.