Operational Technology (OT) Systems Security and Safety, Principal

The MITRE Corporation•New Bedford, MA

4d•Hybrid

About The Position

MITRE's ASA Department seeks a well-connected and recognized expert on risk management for critical infrastructure systems and associated technology. The ideal candidate will be a credible authority on critical infrastructure risk management, understanding how critical infrastructure supports weapons systems and other associated platforms, understanding of established cyber capabilities (e.g., D3FEND, D3FEND for OT, ATT&CK, ATT&CK for ICS, Crown Jewels Analysis for Control Systems), foundational understanding of operational technologies and control systems, knowledge of established industry standards and guidance (i.e., ISA/IEC 62443, NIST 800-82, NIST 800-30), ability to write reports focused on operational technology security in risk terms, lead complex operational technology related projects across numerous efforts, and develop frameworks, policies, processes, and procedures. You will belong to a high-performing team that regularly initiates and implements projects in support of sponsors’ strategic initiatives, often before a sponsor can fully recognize or articulate that they are needed. The team may publish, speak at high visibility events, and advise senior government officials along with their performers from various organizations.

Requirements

Typically requires a minimum of 10 years of related experience with a Bachelor’s degree; or 8 years and a Master’s degree; or a PhD with 5 years’ experience; or equivalent combination of related education and work experience.
Experience with broad exposure across the DoW’s critical infrastructure cybersecurity and cyber resilience programs.
Track record of providing successful thought leadership in planning, executing, and leading workshops.
Experience building coalitions and communities that span multiple organizations across government and the private sector.
Strong critical thinking, analytic, and problem-solving skills – comfortable working in dynamic settings where task objectives may evolve, need to be shaped, or creative solutions to task impediments must be identified.
Demonstrated ability to work in team settings, to include the ability to mentor and lead small to medium multidisciplinary teams toward significant mission outcomes.
Strong interpersonal skills as well as effective verbal and written communication skills.
Working familiarity with industry and DoW policies and standards across the critical infrastructure and cyber domains.
Knowledge and experience developing and executing frameworks for risk management.
Willingness to visit Sponsor sites often for direct engagement and/or meetings.
Ability to lead and conduct highly political and dynamic meetings across DoW, defense contractors, industry, and others.
Active DoD Secret clearance
U.S. Citizenship required.
This position requires a minimum of 50% hybrid on-site presence.

Nice To Haves

Ability to maintain a DoD Top Secret clearance with access to Secure Compartmented Information (TS/SCI).
Bachelor’s degree or higher in an Applied Science or Engineering.
Private sector experience defense, technology, or consulting industries.
Demonstrated ability to maintain and leverage a strong professional network to provide thought leadership across the enterprise.
Demonstrated ability leading critical acquisition modernization or reform efforts with visibility and trust at high levels of government and/or industry.

Responsibilities

Effectively engage and lead sponsors, stakeholders, performers regarding planning, execution, and documentation of workshops, outcomes, and follow on activities.
Develop and propose innovative strategies, policies, and processes that improve risk management to critical infrastructure, ranging from programs, portfolios, and enterprise-wide initiatives.
Contribute with impact as part of one or more integrated product teams to enable DoW to transition emerging technologies and prototypes into fielded operational capabilities for risk management.
Strategically communicate internally and externally on key issues related to critical infrastructure cybersecurity and resilience.
Regularly report status updates to government employees along with their performers from various organizations
Build and manage relationships between senior sponsors, MITRE, and other stakeholders (Federally Funded Research & Development Centers (FFRDCs), University Affiliated Research Centers (UARCs), Industry, academia).
Increase collaboration and coordination on critical infrastructure cybersecurity and cyber resilience across federal, state, and industry to improve identified issues within policy, standards, risk management, etc.
Provide subject matter expertise and drive consistent risk management capabilities across organizational, country, and bureaucracy boundaries.