Lead Cybersecurity Engineer

At MITRE, your passion fuels work that impacts our nation and improves lives. This is where your skills strengthen national security, cybersecurity, health, transportation, and citizen services. We’re a nonprofit engineering, applied research, and advanced technology organization working in the public interest. With objectivity and integrity at our core, we lead federally funded research and development centers for U.S. government agencies – collaborating with industry and academia to deliver integrated, high-impact solutions that advance our nation’s health, security, and prosperity. Our people tackle the toughest technical challenges, supported by competitive benefits, meaningful career development, and a culture of innovation, collaboration, and technical excellence. Choose MITRE for a career with purpose — and help shape the future.

The Cryptography, ICAM, & System Assurance department is comprised of an inspired multi-disciplinary team of researchers and practitioners driving innovation in the department’s technical areas of focus, with particular emphasis in Cryptography; Software Assurance (SwA); and Identity, Credential and Access Management (ICAM). We develop and apply scalable approaches for systems and software, evaluate technology and solutions, lead and foster external partnerships within the communities we support, and conduct novel research and development. We serve in critical roles including:

• Conceive of and advance novel technical ideas,

• Provide deep analyses whose results drive decision-making by our sponsors,

• Build proof-of-concept systems that leverage new technology and concepts, and

• Engage with the vendor community, academia, and our sponsors to raise the bar on cyber security throughout the industry.

Roles & Responsibilities:

As a member of the Cryptography, ICAM, & System Assurance department in the Cyber Engineering Division, you will join an inspired team supporting developers and security researchers around the world. We are seeking an experienced technical professional and critical thinker with deep technical skills and a demonstrated track record of fostering, promoting, and fielding innovative ideas and solutions. This position will provide Supply Chain Risk Management (SCRM) and Cyber SCRM (CSCRM) support to Missile Defense System Program office in Huntsville, AL to support next generation technical program security to the integrated missile defense capability. The Huntsville, AL based position is required to effectively foster relationships and shape the work program. The successful candidate will directly contribute to the technical work for our sponsors and take an active role in overall team dynamics and eventual leadership. Expected responsibilities include:

• Advise government program leadership on SCRM assessment methodology, program processes, and workflow design across all program components.

• Evaluate and improve existing assessment concepts such as risk characterization, criticality analysis, and FOCI/beneficial ownership analysis, and recommend refinements for adoption by execution teams.

• Introduce new concepts, methods, data sources, and tools into the program's SCRM practice, translating emerging approaches into program-ready recommendations.

• Track, interpret, and brief evolving supply chain security rulemaking and policy, translating it into program impact assessments.

• Design analytic standards, assessment templates, and SOPs that drive analyst consistency.

• Prepare decision-quality analysis and artifacts, including briefings, white papers, and recommendations for government decision makers.

• Conduct OSINT and open-source research to inform methodology development and to spot-check or pilot new analytic approaches.

Basic Qualifications:

• Typically requires a minimum of 8 years of related experience with a Bachelor’s degree; or 6 years and a Master’s degree; or a PhD with 3 years’ experience; or equivalent combination of related education and work experience.

• Analytical, decision-making, strategic thinking, and problem-solving skills

• Ability to clearly communicate complex ideas to executive-level stakeholders

• Must have an active Secret U.S Government issued Security Clearance and must be eligible to obtain and maintain a Top Secret/SCI/Polygraph U.S Government issued Security Clearance. Per the U.S. Government’s eligibility requirements, you must be a U.S Citizen to be considered for a security clearance.

• This position requires a minimum of 4 days a week on-site

Supply Chain Assessments

• Experience conducting supply chain risk assessments of vendors, OEMs, and components, including threat, vulnerability, impact, and overall risk characterization

• Experience assessing Foreign Ownership, Control, or Influence (FOCI) and beneficial ownership using open-source corporate records, registries, and ownership data

• Experience evaluating cyber hygiene and external attack surfaces of supply chain entities

• Experience performing or supporting criticality analysis

OSINT and Research

• Familiarity with OSINT tools and tradecraft

• Demonstrated experience conducting research across government supply chain risk data sources, open-source intelligence, and all-source/intelligence inputs, with the ability to evaluate reliability and document sourcing for traceable, defensible findings

Advisory

• Experience improving or standardizing analytic processes, methodologies, and workflows

• Experience developing analytic standards, assessment templates, or SOPs to drive consistency

• Experience advising government program offices or senior leaders by translating technical and policy analysis into decision-quality recommendations

Policy

• Working knowledge of DoW supply chain security, including acquisition regulations, statutory requirements, and DoW SCRM policy and guidance

• Ability to track, interpret, and brief evolving rulemaking and policy

Preferred Qualifications:

• MS or higher degree, and 6 years of relevant work experience

• Active TS/SCI Clearance

Analytic Tooling

• Experience with commercial supply chain risk platforms (illumination tools, supplier risk indicator services)

• Experience with free / open source analytic tools that complement commercial platforms

Microelectronics and Hardware Supply Chain

• Familiarity with the global microelectronics supply chain from design and fabrication through assembly, test, and distribution, including concentration, provenance, and foreign influence risks

• Understanding of microelectronics attack surfaces across the component lifecycle, including supply chain and cyber-attack vectors

Software Supply Chain

• Familiarity with software supply chain analysis, SBOM formats and tools, and vulnerability correlation

This requisition requires the candidate to have a minimum of the following clearance(s):

Secret

This requisition requires the hired candidate to have or obtain, within one year from the date of hire, the following clearance(s):

Top Secret/SCI/Polygraph

Salary compensation range and midpoint:

$158,800 - $198,500 - $238,200 Annual

Work Location Type:

Onsite

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local or international law.

MITRE intends to maintain a website that is fully accessible to all individuals. If you are unable to search or apply for jobs and would like to request a reasonable accommodation for any part of MITRE’s employment process, please email [email protected] for general support and [email protected] for intern positions. This service is for individuals requiring reasonable accommodation requests. Please note that vendor solicitations will not receive a reply.

Benefits information may be found here (https://careers.mitre.org/us/en/benefits) .

Copyright © 1997-2026, The MITRE Corporation. All rights reserved. MITRE is a registered trademark of The MITRE Corporation. Material on this site may be copied and distributed with permission only.