Lead Operational Technology (OT) Cybersecurity Engineer
- Compensation
- Not disclosed
- Location
- McLean, Virginia
- Work setup
- Not specified
- Seniority
- Lead
- Employment
- Internship
- Experience
- 2+ years
- Category
- Security
- Posted
Skills
Must have
- Experience & Education: Typically requires a minimum of 8 years of related experience with a Bachelor’s degree in Electrical Engineering, Computer Engineering, Systems Engineering, Cybersecurity, or r
- Direct OT Environment Experience: Minimum 2 years of hands-on experience working directly with Operational Technology (OT), SCADA, PLCs, RTUs, or industrial control network architectures across one or
- Instruction & Technical Communication: Demonstrated experience developing and delivering technical training, lab tutorials, or hands-on exercises to technical audiences (e.g., engineers, operators, or
- Facilitate training workshops: Travel onsite to client locations to deliver instructor-led sessions.
- Industrial Protocols: Working understanding of industrial protocols (e.g., Modbus TCP, DNP3, OPC UA, Ethernet/IP, IEC 61850, or Siemens S7) and lower-level Purdue Model control mechanics.
- Travel Requirement: Willing and able to travel 25% (approximately 12 weeks per year), primarily within the United States.
- Clearance Requirement: Must be eligible to obtain and maintain a Top Secret/SCI U.S Government issued Security Clearance. Per the U.S. Government’s eligibility requirements, you must be a U.S Citizen
- On-Site Requirement: This position requires a minimum of 3 days a week on-site. 60% hybrid on-site presence required at MITRE or government locations in the National Capital Region.
Nice to have
- Electric Sector Depth: Deep experience with industrial control architecture, protocols, and regulatory standards specific to the electric power sector (e.g., transmission/distribution substations, EMS
- SANS or Industry Instruction Experience: Prior experience creating or instructing formal OT/ICS security training courses (e.g., SANS ICS courses, CISA OT workshops, university labs, or military cyber
- Hardware & PLC Programming: Hands-on experience configuring, wiring, and programming PLCs/RTUs using native engineering software (e.g., TIA Portal, RSLogix/Studio 5000, PAC Machine Edition) or ladder
- Range & Emulation Architecture: Experience with range orchestration, virtualization/containerization for OT (e.g., ESXi, GNS3, Docker), network packet manipulation (Wireshark, Scapy), or breach and at
- Scripting & Software Prototyping: Proficiency in Python, C/C++, or shell scripting for network automation, protocol parsing, or testbed control.
- Active Security Clearance: Active Secret, Top Secret, or TS/SCI security clearance.
Full description
At MITRE, your passion fuels work that impacts our nation and improves lives. This is where your skills strengthen national security, cybersecurity, health, transportation, and citizen services. We’re a nonprofit engineering, applied research, and advanced technology organization working in the public interest. With objectivity and integrity at our core, we lead federally funded research and development centers for U.S. government agencies – collaborating with industry and academia to deliver integrated, high-impact solutions that advance our nation’s health, security, and prosperity. Our people tackle the toughest technical challenges, supported by competitive benefits, meaningful career development, and a culture of innovation, collaboration, and technical excellence. Choose MITRE for a career with purpose — and help shape the future.
##
Are you ready to defend national critical infrastructure from evolving non-kinetic threats? The Critical Infrastructure Protection Department (L561), sitting within MITRE’s Cyber-Physical Systems Division, delivers innovative solutions to sponsor challenges critical to national security and public sector missions. Our multidisciplinary team researches, develops, and applies advanced technologies to ensure the operational resilience of vital national assets.
Our core focus areas include:
- Infrastructure Susceptibility Analysis
- Safety Engineering
- Threat-Informed Recommendations
- Critical Infrastructure (CI) Threat Detection, Analytics, & Adversary Emulation
- Operational Technology (OT) Device Security & Space System OT
- Cross-Sector Interdependency Analysis
- Defense Critical Infrastructure Expertise
- Civilian Critical Infrastructure Sector-Specific Expertise
Job Description:
MITRE’s Critical Infrastructure Protection Department (L561) is seeking a Lead Operational Technology (OT) Cybersecurity Engineer & Instructor to pioneer, maintain, and execute hands-on cyber experimentation and training within MITRE’s state-of-the-art hardware-in-the-loop (HITL) ranges.
In this multi-faceted role, you will bridge physical engineering and cyber defense. You will design physical and simulated OT testbeds—featuring real PLCs, RTUs, relays, and SCADA software—and use them to conduct applied R&D, execute adversary attack exercises, and train government sponsors and critical infrastructure operators. You will turn range experimentation into actionable, evidence-based recommendations, defensive tactics, and high-impact training curricula that strengthen national security assets.
If you are passionate about getting your hands on physical control hardware, building realistic cyber-physical ranges, and educating the nation’s top defenders, this role offers an unmatched platform.