8+ years of experience with a Bachelor's degree, or 6 years with a Master's, or a PhD with 3 years' experience, or equivalent education and experience.
Deep understanding of adversary tradecraft and cyber operations in military and statecraft contexts.
Experience with U.S. government cybersecurity and intelligence agencies.
Strong leadership and communication skills for mentoring and collaboration.
Proficient technical writing skills for articulating complex adversary behaviors.
Demonstrated application of MITRE ATT&CK® in operational settings and structured frameworks.
Familiarity with all-source intelligence databases and analytic tools.
Responsibilities
Contribute to MITRE ATT&CK® to enhance global cybersecurity understanding.
Author and update ATT&CK's knowledge base using cyber intelligence reporting.
Apply cyber intelligence expertise to solve complex problems for sponsors.
Help sponsors integrate cyber intelligence into their mission needs.
Guide sponsors in developing cyber intelligence capabilities and programs.
Review tools and recommend best practices and AI integration opportunities.
Conduct research and development to advance cyber intelligence methodologies.
Benefits
Comprehensive health and wellness programs.
Retirement savings plans with company matching.
Professional development and training opportunities.
Flexible work arrangements and paid time off.
Support for work-life balance initiatives.
Full Job Description
Department Summary:
MITRE's Cyber Threat Intelligence department is seeking a Lead ATT&CK Engineer to join the MITRE ATT&CK team and apply your skills in support of expanding and improving this globally used cybersecurity framework. You will advance our research and innovation in cyber intelligence, lead projects and tasks, and collaborate across MITRE to help shape our work and capability. Our staff work with government, industry, and academia, enabling the public and private sector to make better decisions and implement solutions to complex challenges of national and global significance.
Roles & Responsibilities:
Contribute to MITRE ATT&CK® to help the global cybersecurity community understand threat behaviors.
Author, refine, and update ATT&CK's knowledge base from cyber intelligence reporting.
Apply cyber intelligence expertise to help our sponsors solve their hardest problems, ranging from enabling defensive cyber operations, securing weapons systems, assessing threats to critical infrastructure, and analyzing intelligence reporting to enable cyber effects.
Help sponsors understand how cyber intelligence fits into the mission needs of their organization, whether as a core part of their mission or as an important function in their security organization.
Guide sponsors in building and advancing cyber intelligence capabilities and programs.
Review sponsor tools and recommend best practices, analytic methodologies, and opportunities to integrate AI.
Propose and perform research and development to advance the state of the art in cyber intelligence.
Basic Qualifications:
Typically requires a minimum of 8 years of related experience with a Bachelor's degree; or 6 years and a Master's degree; or a PhD with 3 years' experience; or equivalent combination of related education and work experience.
Knowledge of adversary tradecraft and their utilization of cyber operations as a tool of military force and statecraft.
Experience with U.S. government cybersecurity agencies, intelligence agencies, authorities, and relationships.
Strong leadership and communication skills to effectively mentor teams and collaborate with diverse groups of internal and external stakeholders.
Strong technical writing skills to clearly articulate complex adversary behaviors to a global audience.
Demonstrated application of MITRE ATT&CK® within operational environments and other structured frameworks and analytic techniques (e.g., Diamond Model).
Familiarity with all-source intelligence databases and analytic tools.
Must be eligible to obtain and maintain a Secret U.S Government issued Security Clearance. Per the U.S. Government's eligibility requirements, you must be a U.S Citizen to be considered for a security clearance.
This position requires a minimum of 3 days per week on-site
Preferred Qualifications:
Experience building and managing CTI teams and overseeing the production of strategic, operational, and tactical products and services.
Experience with Threat Intelligence Platforms (TIPs), including configuring TIPs according to stakeholder requirements.
Hands on technical expertise in any of the following additional areas: adversary emulation, defensive cyber operations, cyber analytics & malware analysis, cyber deception and adversary engagement, cyber effects and reverse engineering, and cyber forensics.
Familiarity with adversarial C2 hardware and software.
Familiarity with supporting basic, intermediate, and advanced target development.
Familiarity with vulnerability identification
Familiarity with network architecture analysis
This requisition requires the candidate to have a minimum of the following clearance(s): None
This requisition requires the hired candidate to have or obtain, within one year from the date of hire, the following clearance(s): Secret
Salary compensation range and midpoint: $158,800 - $198,500 - $238,200 Annual
