MITRE Technology and Engineering creates solutions using threat-informed cybersecurity approaches to enhance the security, safety, and resiliency of critical cyber systems and infrastructure.

The Security Automation and Cyber Assessments department serves as MITRE's resource for cyber risk evaluation and security innovation. Our team is dedicated to advancing the field of cybersecurity by combining deep expertise in risk assessment with cutting-edge automation technologies. This dual focus enables us to address the evolving needs of our sponsors, ensuring scalable and effective cybersecurity solutions that meet today's challenges and anticipate tomorrow's threats.

Our work is defined by innovation, exemplified through initiatives like SAF, ECHO, and ACT, which demonstrate our commitment to developing transformative tools and methodologies. By leveraging automation, we empower organizations to enhance their security posture efficiently and effectively, positioning them to stay ahead in an increasingly complex cyber landscape.

The Security Automation and Cyber Assessments department reflects MITRE's leadership in cybersecurity, making our value clear to sponsors and internal stakeholders alike. We don't just assess risks; we innovate solutions that drive the future of cybersecurity.

The Security Automation and Cyber Assessments department within the Cyber Solutions Innovation Center is seeking a Principal level Cybersecurity Assessment Engineer to lead the department's contributions across our portfolios. The department supports all of MITRE by providing a variety of cyber assessment products plus overall cyber engineering skills. The Senior Cybersecurity Assessment Engineer position will be a core member of the department and government technical team and serve as the first-line support for various sponsors. The position requires direct contributions to our diverse work programs.

Roles & Responsibilities:

• Support cybersecurity assessments in support of government sponsors and mission partners.
• Support the development of cybersecurity assessment methodologies and automation capabilities.
• Develop and maintain automation solutions that improve the efficiency and effectiveness of cybersecurity assessment activities.
• Analyze risks and provide recommendations to improve system security, resilience, and compliance.
• Perform vulnerability assessments and pentesting to communicate risks and mitigation strategies.
• Document technical findings, develop reports, and present assessment results and recommendations to sponsors, stakeholders, and technical teams.
• Collaborate effectively with MITRE, government sponsors, contractors, and other stakeholders to address cybersecurity challenges and mission needs.
• Promote collaboration with other organizational elements within the department and across MITRE.

Basic Qualifications:

• Bachelor of Science in Computer Science/Information Systems.
• Minimum 5 years supporting cybersecurity engineering, assessment, testing, or automation.
• Experience with cybersecurity tools, scripting, or automation technologies used to improve security operations and assessment capabilities.
• Familiarity with infrastructure automation technologies such as Ansible, Terraform, or CloudFormation.
• Familiarity with CI/CD pipelines and DevSecOps practices.
• Experience working with Windows and Linux operating systems.
• Experience developing software, scripts, or automation solutions using one or more programming languages such as Python, Java, C++, or C#.
• Ability to analyze technical systems, identify security risks, and communicate findings through written reports and technical documentation.
• Security certification (e.g., Security+, Network+, CEH, AWS Cloud Practitioner) or ability to obtain one.
• Must have an active Top Secret U.S Government issued Security Clearance. Per the U.S. Government's eligibility requirements, you must be a U.S Citizen to be considered for a security clearance.
• This position requires a minimum of 4 days a week on-site

Preferred Qualifications:

• Master's degree in Cybersecurity, Computer Science, Engineering, or a related technical field.
• 8 years of experience conducting cybersecurity assessments, penetration testing, vulnerability analysis, or systems security engineering activities.
• Experience using cybersecurity assessment and testing tools such as Kali Linux, Burp Suite, Wireshark, Nessus, Nmap, or similar technologies.
• Experience supporting offensive and defensive cybersecurity operations, including vulnerability assessment and penetration testing activities.
• Experience securing, integrating, administering, or assessing enterprise IT environments, networks, cloud platforms, or mission systems.
• Knowledge of cybersecurity standards such as NIST RMF, MITRE ATT&CK, STIGs, or CIS Benchmarks.
• Relevant cybersecurity certifications such as CISSP, GPEN, GCIA, GSEC, or comparable credentials.

This requisition requires the candidate to have a minimum of the following clearance(s):
Top Secret

This requisition requires the hired candidate to have or obtain, within one year from the date of hire, the following clearance(s):
Top Secret

Salary compensation range and midpoint:
$129,200 - $161,500 - $193,800 Annual

Work Location Type:
Onsite