Lead Cybersecurity Engineer

The Mitre Corporation•Huntsville, AL

7d•$158,800 - $238,200•Onsite

About The Position

The Lead Cybersecurity Engineer will join MITRE’s Cryptography, ICAM, & System Assurance department in the Cyber Engineering Division. The role supports developers and security researchers and provides Supply Chain Risk Management (SCRM) and Cyber SCRM support to a Missile Defense System Program office in Huntsville, Alabama, contributing to technical program security for integrated missile defense capabilities. The position is based in Huntsville and requires working onsite at least four days per week to foster relationships and shape the work program. The successful candidate will provide technical analysis and advice to government sponsors and program leadership, introduce and evaluate SCRM methods and tools, and help develop consistent program workflows and analytic standards. The role also involves monitoring policy and rulemaking, conducting open-source research, and preparing decision-quality analysis and recommendations for government decision makers. The candidate is expected to contribute to the technical work and team dynamics, with potential for eventual leadership.

Requirements

Typically requires at least 8 years of related experience with a bachelor’s degree, 6 years with a master’s degree, or 3 years with a Ph.D., or an equivalent combination of education and work experience.
Strong analytical, decision-making, strategic-thinking, and problem-solving skills.
Ability to clearly communicate complex ideas to executive-level stakeholders.
Active Secret U.S. Government-issued security clearance and eligibility to obtain and maintain a Top Secret/SCI/Polygraph U.S. Government-issued security clearance; U.S. citizenship is required for security clearance eligibility.
Ability to work onsite at least four days per week.
Experience conducting supply chain risk assessments of vendors, OEMs, and components, including threat, vulnerability, impact, and overall risk characterization.
Experience assessing Foreign Ownership, Control, or Influence (FOCI) and beneficial ownership using open-source corporate records, registries, and ownership data.
Experience evaluating cyber hygiene and external attack surfaces of supply chain entities.
Experience performing or supporting criticality analysis.
Familiarity with OSINT tools and tradecraft.
Demonstrated experience researching government supply chain risk data sources, open-source intelligence, and all-source/intelligence inputs; ability to assess reliability and document sourcing for traceable, defensible findings.
Experience improving or standardizing analytic processes, methodologies, and workflows.
Experience developing analytic standards, assessment templates, or SOPs to drive consistency.
Experience advising government program offices or senior leaders by translating technical and policy analysis into decision-quality recommendations.
Working knowledge of DoW supply chain security, including acquisition regulations, statutory requirements, and DoW SCRM policy and guidance.
Ability to track, interpret, and brief evolving rulemaking and policy.

Nice To Haves

MS or higher degree and 6 years of relevant work experience.
Active TS/SCI clearance.
Experience with commercial supply chain risk platforms, including illumination tools and supplier risk indicator services.
Experience with free or open-source analytic tools that complement commercial platforms.
Familiarity with the global microelectronics supply chain from design and fabrication through assembly, test, and distribution, including concentration, provenance, and foreign influence risks.
Understanding of microelectronics attack surfaces across the component lifecycle, including supply chain and cyber-attack vectors.
Familiarity with software supply chain analysis, SBOM formats and tools, and vulnerability correlation.

Responsibilities

Advise government program leadership on SCRM assessment methodology, program processes, and workflow design across program components.
Evaluate and improve assessment concepts, including risk characterization, criticality analysis, and FOCI/beneficial ownership analysis, and recommend refinements for execution teams.
Introduce new concepts, methods, data sources, and tools into the program’s SCRM practice, translating emerging approaches into program-ready recommendations.
Track, interpret, and brief evolving supply chain security rulemaking and policy, translating these into program impact assessments.
Design analytic standards, assessment templates, and SOPs to drive analyst consistency.
Prepare decision-quality analysis and artifacts, including briefings, white papers, and recommendations for government decision makers.
Conduct OSINT and open-source research to inform methodology development and spot-check or pilot new analytic approaches.
Contribute to the technical work for sponsors and participate actively in team dynamics and eventual leadership.