Industrial Control System (ICS) Cybersecurity Engineer

$168,500 - $252,500/Yr

MITRE Corporation - Colorado Springs, CO

Full-time - Mid Level

Colorado Springs, CO

Professional, Scientific, and Technical Services

About the position

The Industrial Control System (ICS) Cybersecurity Engineer at MITRE is responsible for enhancing the cybersecurity of critical operational technology systems. This role involves collaborating with government and industry stakeholders to develop and implement innovative cybersecurity solutions, ensuring the resilience of industrial control systems against cyber threats. The engineer will engage in applied research, develop cyber protection technologies, and operationalize cyber analytics architectures to improve situational awareness and threat detection in OT environments.

Responsibilities

• Work directly with government and critical infrastructure operators to develop requirements for new cyber protection technologies.
• Perform applied research and development activities to enhance OT cybersecurity.
• Develop operational pilots and assist in transitioning them to operational use.
• Operationalize cyber sensor and cyber analytics architectures for efficient OT cybersecurity operations.
• Research and develop improved situational awareness of OT assets through multi-source data analytics.
• Conduct cyber mission dependency and adversary cyberattack scenario analyses to inform OT resilient architecture design.
• Research, develop, and improve OT defensive tactics, techniques, and procedures (TTPs) for cyber threat detection and response.
• Utilize MITRE ATT&CK® and ATT&CK for ICS to build detection capabilities and support adversary hunting in OT environments.
• Research and develop OT Cyber Resiliency solutions, including defense architectures for ICS.
• Perform forensics analysis of OT devices to support cyber incident analysis.
• Develop and perform attack emulation and deception operations.

Requirements

• Minimum of 10 years of related experience with a Bachelor's degree; or 8 years with a Master's degree; or a PhD with 5 years' experience; or equivalent combination of education and work experience.
• Experience in one or more areas listed under work responsibilities.
• Experience working with electric utilities, gas utilities, manufacturing companies, port facilities, or water utilities in industrial control system cybersecurity.

Nice-to-haves

• Experience with cybersecurity of distributed energy resources (solar, wind) and electric vehicle charging infrastructure.
• Experience working with federal departments and agencies or their stakeholders and critical infrastructure organizations.
• Experience with embedded system firmware or real-time operating systems.
• Experience with OT network monitoring including serial, Ethernet, wireless, etc.
• Experience with OT adversary emulation.
• Working knowledge of cybersecurity policies and standards related to ICS/SCADA.
• Strong writing and communication skills.

Benefits

• Competitive benefits
• Exceptional professional development opportunities
• Culture of innovation that embraces diversity, inclusion, flexibility, collaboration, and career growth