Principal Cyber Intelligence Engineer
About The Position
MITRE’s Cyber Threat Intelligence department is seeking a Principal Cyber Intelligence Engineer to support government and private-sector sponsors. The role advances cyber intelligence research and innovation, leads projects and tasks, and collaborates across MITRE to shape its work and capabilities. The position works with government, industry, and academia to help public- and private-sector organizations make better decisions and address complex challenges of national and global significance. The engineer applies cyber intelligence expertise to sponsor missions, guides the development of cyber intelligence capabilities and programs, reviews tools and recommends analytic practices and AI integration opportunities, and proposes and conducts research and development. The role also contributes to the broader cybersecurity community through MITRE ATT&CK® and develops approaches for integrating cyber threat intelligence with other cybersecurity functions. The position requires working onsite at least four days per week.
Requirements
- Typically requires at least 10 years of related experience with a bachelor’s degree; 8 years with a master’s degree; a Ph.D. with 5 years of experience; or an equivalent combination of education and work experience.
- Knowledge of adversary tradecraft and the use of cyber operations as a tool of military force and statecraft.
- Experience with U.S. government cybersecurity agencies, intelligence agencies, authorities, and relationships.
- Strong leadership and communication skills, including the ability to mentor teams and collaborate with diverse internal and external stakeholders.
- Demonstrated application of MITRE ATT&CK® in operational environments and familiarity with other structured frameworks and analytic techniques, such as the Diamond Model.
- Familiarity with all-source intelligence databases and analytic tools.
- Must be eligible to obtain and maintain a Top Secret U.S. government-issued security clearance; U.S. citizenship is required for clearance eligibility.
- Must work onsite at least four days per week.
Nice To Haves
- Experience building and managing CTI teams and overseeing strategic, operational, and tactical products and services.
- Experience with Threat Intelligence Platforms (TIPs), including configuring them according to stakeholder requirements.
- Hands-on technical expertise in one or more of the following: adversary emulation, defensive cyber operations, cyber analytics and malware analysis, cyber deception and adversary engagement, cyber effects and reverse engineering, or cyber forensics.
- Familiarity with adversarial C2 hardware and software.
- Familiarity with supporting basic, intermediate, and advanced target development.
- Familiarity with vulnerability identification.
- Familiarity with network architecture analysis.
- Advanced knowledge of MITRE ATT&CK® and adversary behavioral analysis.
- Experience integrating CTI with threat hunting, detection engineering, and incident response.
Responsibilities
- Apply cyber intelligence expertise to sponsor challenges, including defensive cyber operations, weapons-system security, critical-infrastructure threat assessment, and intelligence analysis supporting cyber effects.
- Help sponsors understand how cyber intelligence supports their mission and security organization.
- Guide sponsors in building and advancing cyber intelligence capabilities and programs.
- Review sponsor tools and recommend best practices, analytic methodologies, and opportunities to integrate AI.
- Propose and perform research and development to advance cyber intelligence.
- Use or contribute to MITRE ATT&CK® to help the cybersecurity community understand threat behaviors.
- Perform technical threat analysis, including intrusion and malware analysis, threat actor profiling, infrastructure analysis, and adversary campaign tracking.
- Evaluate and apply CTI tools, platforms, data sources, automation, and emerging technologies, including AI and machine learning, to improve intelligence collection, analysis, correlation, and dissemination.
- Develop approaches to integrate cyber threat intelligence with threat hunting, detection engineering, incident response, vulnerability management, and cyber risk analysis.
- Lead projects and tasks and collaborate across MITRE and with government, industry, academia, and sponsor stakeholders.
Benefits
- Competitive benefits are mentioned, but specific benefits are not listed; further information is referenced on MITRE’s benefits website.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Principal
