Operational Technology Cyber Threat Intelligence, Principal
The Mitre Corporation · Posted Nov 3, 2026
- McLean, Virginia, United States
- On-site
- Full-time · Principal
- $173K–$259K per year
- 10+ years
MITRE is seeking an Operational Technology (OT) Cyber Threat Intelligence Lead to bridge the gap between deep OT threat intelligence and automated adversary emulation. The role involves analyzing real-world adversary TTPs targeting industrial control systems (ICS), SCADA, and Space OT environments.
Compensation
Salary compensation range and midpoint: $172,800 - $216,000 - $259,200 Annual
Responsibilities
- Adversary Behavior Deconstruction: Analyze real-world ICS/OT threat intelligence (e.g., PIPEDREAM, INCONTROLLER, Industroyer) to identify specific adversary behaviors, target device types, and network communication patterns.
- Emulation Team Alignment: Translate OT threat intelligence into concrete technical requirements, attack flows, and protocol parameters for developers building automated emulation capabilities (e.g., Caldera for OT).
- OT Threat Tracking: Track and characterize advanced persistent threats (APTs) targeting critical infrastructure, defense industrial base assets, and space system OT environments using unclassified and classified intel sources.
- Sponsor Program Guidance: Advise government sponsors and critical infrastructure owner/operators on developing OT-specific threat intelligence programs and adopting threat-informed defense strategies.
- Risk & Susceptibility Analysis: Conduct OT-focused threat modeling, mission impact analyses, and cyber-physical risk assessments using frameworks such as ATT&CK for ICS and SPARTA.