Industrial Control System (ICS) Cybersecurity Engineer

$168,500 - $252,500/Yr

MITRE Corporation - Colorado Springs, CO

Full-time - Mid Level

Colorado Springs, CO

Professional, Scientific, and Technical Services

About the position

The position involves working with MITRE's government and industry homeland security sponsors to enhance cybersecurity for industrial control systems. The role focuses on developing innovative solutions in Operational Technology (OT) and integrated security operations, addressing critical challenges in cybersecurity across various sectors including energy and utilities.

Responsibilities

• Work directly with government and critical infrastructure operators to develop requirements for new cyber protection technologies.
• Perform applied research and development activities, develop operational pilots, and assist in transition to operational use.
• Develop and operationalize cyber sensor and cyber analytics architectures for OT cybersecurity operations.
• Research and develop improved situational awareness of OT assets through multi-source data analytics.
• Conduct cyber mission dependency, criticality, mission failure, and adversary cyberattack scenario analyses.
• Research, develop, operationalize, evaluate, and improve OT defensive tactics, techniques, and procedures (TTPs).
• Use MITRE ATT&CK® and ATT&CK for ICS to build detection capability and support adversary hunting in OT environments.
• Research and develop OT Cyber Resiliency solutions and operationalize OT/ICS SCADA cyber defense architectures.
• Perform forensics analysis of OT devices to support cyber incident analysis.
• Develop and perform attack emulation and deception operations.

Requirements

• Minimum of 10 years of related experience with a Bachelor's degree; or 8 years with a Master's degree; or a PhD with 5 years' experience; or equivalent combination of education and work experience.
• Experience in one or more areas listed under work responsibilities.
• Experience working with electric utilities, gas utilities, manufacturing companies, port facilities, or water utilities in industrial control system cybersecurity.

Nice-to-haves

• Experience with cybersecurity of distributed energy resources (solar, wind) and electric vehicle charging infrastructure.
• Experience working with federal departments and agencies or their stakeholders and critical infrastructure organizations.
• Experience with embedded system firmware or real-time operating systems.
• Experience with OT network monitoring including serial, Ethernet, wireless, etc.
• Experience with OT adversary emulation.
• Working knowledge of cybersecurity policies and standards related to ICS/SCADA.
• Strong writing and communication skills.

Benefits

• Competitive benefits
• Exceptional professional development opportunities
• Culture of innovation that embraces diversity, inclusion, flexibility, collaboration, and career growth