Industrial Control System (ICS) Cybersecurity Engineer

$168,500 - $252,500/Yr

MITRE Corporation - Bedford, MA

Full-time - Mid Level

Bedford, MA

Professional, Scientific, and Technical Services

About the position

The Industrial Control System (ICS) Cybersecurity Engineer at MITRE is responsible for enhancing the cybersecurity of critical operational technology systems. This role involves collaborating with government and industry stakeholders to develop and implement innovative cybersecurity solutions, ensuring the resilience of industrial control systems against cyber threats. The engineer will engage in research, operational pilots, and the development of cyber protection technologies, while also focusing on threat-informed cyber defense and forensics analysis.

Responsibilities

• Work directly with government and critical infrastructure operators to develop requirements for new cyber protection technologies.
• Perform applied research and development activities to enhance OT cybersecurity.
• Develop operational pilots and assist in the transition to operational use.
• Operationalize cyber sensor and cyber analytics architectures for efficient OT cybersecurity operations.
• Research and develop improved situational awareness of OT assets through data analytics.
• Conduct cyber mission dependency and adversary cyberattack scenario analyses.
• Research and develop OT defensive tactics, techniques, and procedures (TTPs) for cyber threat detection and response.
• Utilize MITRE ATT&CK® and ATT&CK for ICS to build detection capabilities in OT environments.
• Research and develop OT Cyber Resiliency solutions and architectures.
• Perform forensics analysis of OT devices to support cyber incident analysis.
• Develop and perform attack emulation and deception operations.

Requirements

• Minimum of 10 years of related experience with a Bachelor's degree; or 8 years with a Master's degree; or a PhD with 5 years' experience; or equivalent combination of education and work experience.
• Experience in one or more areas listed under work responsibilities.
• Experience working with electric utilities, gas utilities, manufacturing companies, port facilities, or water utilities in industrial control system cybersecurity.

Nice-to-haves

• Experience with cybersecurity of distributed energy resources (solar, wind) and electric vehicle charging infrastructure.
• Experience working with federal departments and agencies or their stakeholders.
• Experience with embedded system firmware or real-time operating systems.
• Experience with OT network monitoring including serial, Ethernet, wireless, etc.
• Experience with OT adversary emulation.
• Working knowledge of cybersecurity policies and standards related to ICS/SCADA.
• Strong writing and communication skills.

Benefits

• Competitive benefits
• Exceptional professional development opportunities
• Culture of innovation that embraces diversity, inclusion, flexibility, collaboration, and career growth