OT Threat Intelligence Lead for ICS/Space Emulation

Mitre Corporation; Colorado Springs (CO); On-site; USD 173,000 - 259,000; Full time

Job summary

MITRE’s Critical Infrastructure Protection Department seeks an Operational Technology (OT) Cyber Threat Intelligence Lead to bridge deep OT threat intelligence and automated adversary emulation. In this role, you will analyze real-world adversary TTPs targeting ICS/OT environments and distill complex OT threat reporting into operational behaviors and protocol mechanics for automation.

If you want to study real-world adversary behavior in cyber-physical systems and strengthen national critical

Qualifications

• Minimum 2 years hands-on OT/ICS/Space OT experience stated in job description.
• Experience applying ICS ATT&CK, SPARTA, or Cyber Kill Chain for analysis.
• Active Top Secret/SCI clearance is required.

Responsibilities

• Deconstruct real-world ICS/OT threat intel to identify adversary behaviors.
• Translate threat intel into technical requirements for emulation tooling.
• Track OT threats affecting critical infrastructure and space OT.
• Advise sponsors on OT threat intelligence programs and defenses.
• Perform OT threat modeling and risk analyses using ATT&CK for ICS/SPARTA.
• Produce actionable technical briefs and attack-flow mappings.

Skills

OT/ICS threat analysis

Threat modeling

Adversary emulation

Industrial protocols knowledge

Caldera for OT

Purdue Model a/o 0-3

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Intelligence Studies, Strategic Intelligence, or related field

Tools

Caldera for OT

CyberSentry SIEM

Job description

MITRE’s Critical Infrastructure Protection Department seeks an Operational Technology (OT) Cyber Threat Intelligence Lead to bridge deep OT threat intelligence and automated adversary emulation. In this role, you will analyze real-world adversary TTPs targeting ICS/OT environments and distill complex OT threat reporting into operational behaviors and protocol mechanics for automation.

If you want to study real-world adversary behavior in cyber-physical systems and strengthen national critical