Lead ATT&CK Engineer

The Mitre Corporation • McLean, VA

7d • $158,800 - $238,200 • Onsite

About The Position

MITRE’s Cyber Threat Intelligence department is seeking a Lead ATT&CK Engineer to join the MITRE ATT&CK team and help expand and improve this globally used cybersecurity framework. The role advances research and innovation in cyber intelligence, leads projects and tasks, and collaborates across MITRE. The team works with government, industry, and academia to help public- and private-sector organizations address complex challenges of national and global significance.

The engineer contributes to MITRE ATT&CK by authoring, refining, and updating its knowledge base using cyber intelligence reporting. The role also applies cyber intelligence expertise to sponsor missions, guides organizations in building and advancing their cyber intelligence capabilities, reviews sponsor tools, recommends analytic methods and AI integration opportunities, and proposes and performs research and development in cyber intelligence. This position requires at least three days per week onsite.

Requirements

• Typically requires at least 8 years of related experience with a bachelor’s degree, 6 years with a master’s degree, or 3 years with a Ph.D., or an equivalent combination of related education and work experience.
• Knowledge of adversary tradecraft and the use of cyber operations as a tool of military force and statecraft.
• Experience with U.S. government cybersecurity and intelligence agencies, authorities, and relationships.
• Strong leadership and communication skills to mentor teams and collaborate with diverse internal and external stakeholders.
• Strong technical writing skills to clearly explain complex adversary behaviors to a global audience.
• Demonstrated application of MITRE ATT&CK in operational environments and experience with other structured frameworks and analytic techniques, such as the Diamond Model.
• Familiarity with all-source intelligence databases and analytic tools.
• Must be eligible to obtain and maintain a Secret U.S. Government-issued security clearance; U.S. citizenship is required for clearance eligibility.
• Must work onsite at least 3 days per week.

Nice To Haves

• Experience building and managing cyber threat intelligence (CTI) teams and overseeing strategic, operational, and tactical products and services.
• Experience with Threat Intelligence Platforms (TIPs), including configuring them according to stakeholder requirements.
• Hands-on technical expertise in one or more of adversary emulation, defensive cyber operations, cyber analytics and malware analysis, cyber deception and adversary engagement, cyber effects and reverse engineering, or cyber forensics.
• Familiarity with adversarial command-and-control hardware and software.
• Familiarity with supporting basic, intermediate, and advanced target development.
• Familiarity with vulnerability identification.
• Familiarity with network architecture analysis.

Responsibilities

• Contribute to MITRE ATT&CK to help the global cybersecurity community understand threat behaviors.
• Author, refine, and update ATT&CK’s knowledge base from cyber intelligence reporting.
• Apply cyber intelligence expertise to help sponsors solve problems involving defensive cyber operations, weapons-system security, critical-infrastructure threats, and intelligence reporting for cyber effects.
• Help sponsors understand how cyber intelligence fits their organization’s mission and security functions.
• Guide sponsors in building and advancing cyber intelligence capabilities and programs.
• Review sponsor tools and recommend best practices, analytic methodologies, and opportunities to integrate AI.
• Propose and perform research and development to advance the state of the art in cyber intelligence.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior