Industrial Control System (ICS) Cybersecurity Engineer

$168,500 - $252,500/Yr

MITRE Corporation - Colorado Springs, CO

Full-time - Mid Level

Colorado Springs, CO

Professional, Scientific, and Technical Services

About the position

The Industrial Control System (ICS) Cybersecurity Engineer at MITRE plays a crucial role in enhancing the cybersecurity of operational technology systems across government organizations and critical infrastructure providers. This position involves collaborating with government and industry stakeholders to develop innovative cybersecurity solutions, conduct research, and implement effective cyber defense strategies. The engineer will work on various aspects of cybersecurity, including threat hunting, forensics analysis, and the development of resilient architectures to protect against cyber threats.

Responsibilities

• Work directly with government and critical infrastructure operators to develop requirements for new cyber protection technologies.
• Perform applied research and development activities related to OT cybersecurity.
• Develop operational pilots and assist in the transition to operational use.
• Operationalize cyber sensor and cyber analytics architectures for efficient OT cybersecurity operations.
• Research and develop improved situational awareness of OT assets through data analytics.
• Conduct cyber mission dependency and adversary cyberattack scenario analyses.
• Research, develop, and improve OT defensive tactics, techniques, and procedures (TTPs).
• Utilize MITRE ATT&CK® and ATT&CK for ICS to enhance detection capabilities.
• Research and develop OT Cyber Resiliency solutions and architectures.
• Perform forensics analysis of OT devices for cyber incident analysis.
• Develop and execute attack emulation and deception operations.

Requirements

• Minimum of 10 years of related experience with a Bachelor's degree; or 8 years with a Master's degree; or a PhD with 5 years' experience; or equivalent combination of education and experience.
• Experience in one or more areas listed under work responsibilities.
• Experience working with electric utilities, gas utilities, manufacturing companies, port facilities, or water utilities in industrial control system cybersecurity.

Nice-to-haves

• Experience with cybersecurity of distributed energy resources (solar, wind) and electric vehicle charging infrastructure.
• Experience working with federal departments and agencies or their stakeholders.
• Experience with embedded system firmware or real-time operating systems.
• Experience with OT network monitoring including serial, Ethernet, wireless, etc.
• Experience with OT adversary emulation.
• Working knowledge of cybersecurity policies and standards related to ICS/SCADA.
• Strong writing and communication skills.

Benefits

• Competitive benefits package
• Exceptional professional development opportunities
• Culture of innovation that embraces diversity and inclusion
• Flexible work arrangements