Intermediate Cybersecurity Automation & Assessment Engineer

The MITRE Corporation • Fort Meade, MD

2d • $103,600 - $155,400 • Onsite

About The Position

MITRE is seeking an Intermediate Cybersecurity Assessment Engineer to contribute technical expertise across its assessment and cyber engineering portfolios. As a core member of the technical team and a primary technical point of contact for sponsors, this engineer will conduct cybersecurity assessments, translate findings into actionable recommendations, and help develop and apply automation capabilities. The role combines hands-on engineering, sponsor engagement, and technical leadership to address complex cybersecurity challenges.

The engineer will develop automation tools and scripts, perform assessments and vulnerability analyses, create automated data collection and reporting capabilities, and analyze security logs and events. The position also supports vulnerability management, cross-functional security process improvements, technical documentation, and the evaluation of emerging technologies such as AI-enabled automation and large language models. The position requires at least three days per week onsite. The hired candidate must obtain a Top Secret clearance within one year of hire; candidates must be U.S. citizens and eligible to obtain and maintain the clearance.

Requirements

• Bachelor’s degree and a minimum of 2 years of related experience; or an advanced degree with relevant experience that enables immediate contribution at this job step; or an equivalent combination of related education and work experience.
• Experience developing automation solutions using Python, PowerShell, Bash, or similar scripting languages to improve operational efficiency and reduce manual effort.
• Experience performing security assessments, vulnerability analysis, or compliance reviews using frameworks such as NIST, ISO 27001, CIS Controls, or similar.
• Familiarity with SIEM and endpoint security platforms such as Splunk, Microsoft Defender, CrowdStrike, Sentinel, or QRadar for log analysis and incident investigation.
• Knowledge of enterprise networking concepts including TCP/IP, DNS, firewalls, VLANs, and Windows/Linux administration.
• Experience documenting technical procedures, developing runbooks, and communicating technical findings to technical and non-technical stakeholders.
• Demonstrated analytical and problem-solving skills, including the ability to troubleshoot complex technical issues independently and collaboratively.
• Must be eligible to obtain and maintain a Top Secret U.S. Government-issued security clearance. U.S. citizenship is required for security clearance eligibility.
• Must work onsite a minimum of three days per week.

Nice To Haves

• Master’s degree in Cybersecurity, Computer Science, Engineering, or a related technical field.
• Five years of experience conducting cybersecurity assessments, penetration testing, vulnerability analysis, or systems security engineering activities.
• Experience using cybersecurity assessment and testing tools such as Kali Linux, Burp Suite, Wireshark, Nessus, Nmap, or similar technologies.
• Experience supporting offensive and defensive cybersecurity operations, including vulnerability assessment and penetration testing activities.
• Experience securing, integrating, administering, or assessing enterprise IT environments, networks, cloud platforms, or mission systems.
• Knowledge of cybersecurity standards such as NIST RMF, MITRE ATT&CK, STIGs, or CIS Benchmarks.
• Relevant cybersecurity certifications such as CISSP, GPEN, GCIA, GSEC, or comparable credentials.

Responsibilities

• Develop and maintain automation tools and scripts using Python, PowerShell, Bash, or similar languages to improve assessment and operational workflows.
• Perform cybersecurity assessments, vulnerability analyses, and compliance evaluations across systems, applications, and networks.
• Design and implement automated data collection, validation, and reporting capabilities to improve assessment efficiency.
• Analyze logs and security events using SIEM and endpoint security tools to identify risks, anomalies, and opportunities for automation.
• Support vulnerability management by validating findings, prioritizing remediation efforts, and tracking corrective actions.
• Collaborate with cross-functional teams to integrate automation solutions and improve security processes.
• Create and maintain technical documentation, assessment reports, and standard operating procedures.
• Evaluate and implement emerging technologies, including AI-enabled automation and large language models (LLMs), to enhance assessment capabilities and operational effectiveness.
• Serve as a primary technical point of contact for sponsors and translate assessment findings into actionable recommendations.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level