Operational Technology Cyber SME

MIT Lincoln Laboratory•Lexington, MA

1d•$100,600 - $136,200•Onsite

About The Position

In the Cyber Operations & Analysis Technology Group at MIT Lincoln Laboratory, we research challenging technical problems in cyber security, develop new technologies, and prototype first-of-a-kind systems. We have particular focus on enabling human operators and improving operational systems, orienting our work toward strong practical impact. We work across a variety of cutting-edge national-security applications, including quantifying risk posed by adversary cyber threats, enhancing the cyber security and resilience of critical infrastructure and other operational technology, protecting and defending U.S. weapon systems, helping the nation’s cyber operators do their jobs better, faster, and at greater scale, and creating game-changing capabilities for defensive cyberspace operations. As an interdisciplinary group, we innovate by drawing insights from computer science, software engineering, data engineering, data science, artificial intelligence/machine learning, electrical engineering, mathematics, statistics, physics, and allied technical fields. We collaborate with research partners across MIT, offering frequent opportunities to team and learn in new areas. If you want a career in R&D with the opportunity to have real impact on important problems, join us! We are seeking an experienced Operational Technology (OT) Cyber Resilience Subject Matter Expert to join our team at MIT Lincoln Laboratory as a Specialist in a technical role. The successful candidate will have a strong background and experience in securing industrial control systems (ICS), SCADA systems, and critical infrastructure environments, as well as experience with OT-specific security tools and threat analysis.

Requirements

Bachelor's degree in Computer Science, Cybersecurity, Engineering, or a related field (Master's degree preferred)
Minimum 8 years of experience in operational technology cybersecurity, including experience securing industrial control systems, SCADA systems, or critical infrastructure environments
Experience with OT security tools and platforms such as Nozomi Networks, Claroty, Dragos, Tenable, or similar solutions for asset discovery, network monitoring, threat detection, and vulnerability management
Strong understanding of OT/ICS protocols (e.g., Modbus, DNP3, OPC, BACnet, Profinet), industrial networks, and operational technology environments
Familiarity with OT-specific cybersecurity frameworks and standards (e.g., IEC 62443, NIST Cybersecurity Framework, NERC CIP)
Excellent analytical and problem-solving skills, with the ability to think critically about unique OT security challenges
Excellent written and oral communication skills, including technical communication for non-technical audiences
Ability to work both independently and collaboratively on difficult, open-ended problems in OT cybersecurity with interdisciplinary technical teams
Motivation to identify underlying technical problems and investigate solutions proactively
Selected candidate will be subject to a pre-employment background investigation and must be able to obtain and maintain a Top Secret-level DoD security clearance.
Must be within commutable distance of Lexington, Massachusetts.
U.S. citizenship is required.

Nice To Haves

Experience with programming languages such as Python, C/C++, Rust, and/or Java
Hands-on experience with specific industrial sectors (e.g., energy, manufacturing, water/wastewater, transportation, defense industrial base)
Experience with OT incident response, forensics, or threat hunting in industrial environments
Knowledge of programmable logic controllers (PLCs), distributed control systems (DCS), human-machine interfaces (HMIs), and other industrial automation components
Experience working in a research environment, with a focus on developing and applying new technologies and techniques to solve complex OT security problems

Responsibilities

Contribute to technical R&D efforts identifying OT security gaps and developing solutions to meet operational needs in critical infrastructure and industrial environments
Work closely with operational stakeholders to identify technical needs and challenges specific to OT/ICS environments
Provide expert-level guidance on OT cyber resilience to technical researchers, government stakeholders, and critical infrastructure owner/operators
Stay informed of emerging OT-specific cyber threats and vulnerabilities, including advanced persistent threats and nation-state sponsored attacks
Develop and maintain expertise in emerging technologies and techniques relevant for OT security and defense, including Zero Trust principles and techniques, artificial intelligence, secure remote access, asset discovery, and anomaly detection