Lead Cybersecurity Engineer

At MITRE, your passion fuels work that impacts our nation and improves lives. This is where your skills strengthen national security, cybersecurity, health, transportation, and citizen services. We’re a nonprofit engineering, applied research, and advanced technology organization working in the public interest. With objectivity and integrity at our core, we lead federally funded research and development centers for U.S. government agencies – collaborating with industry and academia to deliver integrated, high-impact solutions that advance our nation’s health, security, and prosperity. Our people tackle the toughest technical challenges, supported by competitive benefits, meaningful career development, and a culture of innovation, collaboration, and technical excellence. Choose MITRE for a career with purpose — and help shape the future.The Cryptography, ICAM, & System Assurance department is comprised of an inspired multi-disciplinary team of researchers and practitioners driving innovation in the department’s technical areas of focus, with particular emphasis in Cryptography; Software Assurance (SwA); and Identity, Credential and Access Management (ICAM). We develop and apply scalable approaches for systems and software, evaluate technology and solutions, lead and foster external partnerships within the communities we support, and conduct novel research and development. We serve in critical roles including:Conceive of and advance novel technical ideas,Provide deep analyses whose results drive decision-making by our sponsors,Build proof-of-concept systems that leverage new technology and concepts, andEngage with the vendor community, academia, and our sponsors to raise the bar on cyber security throughout the industry.Roles & Responsibilities:As a member of the Cryptography, ICAM, & System Assurance department in the Cyber Engineering Division, you will join an inspired team supporting developers and security researchers around the world. We are seeking an experienced technical professional and critical thinker with deep technical skills and a demonstrated track record of fostering, promoting, and fielding innovative ideas and solutions. This position will provide Supply Chain Risk Management (SCRM) and Cyber SCRM (CSCRM) support to Missile Defense System Program office in Huntsville, AL to support next generation technical program security to the integrated missile defense capability. The Huntsville, AL based position is required to effectively foster relationships and shape the work program. The successful candidate will directly contribute to the technical work for our sponsors and take an active role in overall team dynamics and eventual leadership. Expected responsibilities include:Advise government program leadership on SCRM assessment methodology, program processes, and workflow design across all program components.Evaluate and improve existing assessment concepts such as risk characterization, criticality analysis, and FOCI/beneficial ownership analysis, and recommend refinements for adoption by execution teams.Introduce new concepts, methods, data sources, and tools into the program's SCRM practice, translating emerging approaches into program-ready recommendations.Track, interpret, and brief evolving supply chain security rulemaking and policy, translating it into program impact assessments.Design analytic standards, assessment templates, and SOPs that drive analyst consistency.Prepare decision-quality analysis and artifacts, including briefings, white papers, and recommendations for government decision makers.Conduct OSINT and open-source research to inform methodology development and to spot-check or pilot new analytic approaches.Basic Qualifications:Typically requires a minimum of 8 years of related experience with a Bachelor’s degree; or 6 years and a Master’s degree; or a PhD with 3 years’ experience; or equivalent combination of related education and work experience.Analytical, decision-making, strategic thinking, and problem-solving skillsAbility to clearly communicate complex ideas to executive-level stakeholdersMust have an active Secret U.S Government issued Security Clearance and must be eligible to obtain and maintain a Top Secret/SCI/Polygraph U.S Government issued Security Clearance. Per the U.S. Government’s eligibility requirements, you must be a U.S Citizen to be considered for a security clearance.This position requires a minimum of 4 days a week on-siteSupply Chain AssessmentsExperience conducting supply chain risk assessments of vendors, OEMs, and components, including threat, vulnerability, impact, and overall risk characterizationExperience assessing Foreign Ownership, Control, or Influence (FOCI) and beneficial ownership using open-source corporate records, registries, and ownership dataExperience evaluating cyber hygiene and external attack surfaces of supply chain entitiesExperience performing or supporting criticality analysisOSINT and ResearchFamiliarity with OSINT tools and tradecraftDemonstrated experience conducting research across government supply chain risk data sources, open-source intelligence, and all-source/intelligence inputs, with the ability to evaluate reliability and document sourcing for traceable, defensible findingsAdvisoryExperience improving or standardizing analytic processes, methodologies, and workflowsExperience developing analytic standards, assessment templates, or SOPs to drive consistencyExperience advising government program offices or senior leaders by translating technical and policy analysis into decision-quality recommendationsPolicyWorking knowledge of DoW supply chain security, including acquisition regulations, statutory requirements, and DoW SCRM policy and guidanceAbility to track, interpret, and brief evolving rulemaking and policyPreferred Qualifications:MS or higher degree, and 6 years of relevant work experienceActive TS/SCI ClearanceAnalytic ToolingExperience with commercial supply chain risk platforms (illumination tools, supplier risk indicator services)Experience with free / open source analytic tools that complement commercial platformsMicroelectronics and Hardware Supply ChainFamiliarity with the global microelectronics supply chain from design and fabrication through assembly, test, and distribution, including concentration, provenance, and foreign influence risksUnderstanding of microelectronics attack surfaces across the component lifecycle, including supply chain and cyber-attack vectorsSoftware Supply ChainFamiliarity with software supply chain analysis, SBOM formats and tools, and vulnerability correlationThis requisition requires the candidate to have a minimum of the following clearance(s):SecretThis requisition requires the hired candidate to have or obtain, within one year from the date of hire, the following clearance(s):Top Secret/SCI/PolygraphSalary compensation range and midpoint:$158,800 - $198,500 - $238,200 AnnualWork Location Type:OnsiteCommitment to Non-DiscriminationAll qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local or international law.MITRE intends to maintain a website that is fully accessible to all individuals. If you are unable to search or apply for jobs and would like to request a reasonable accommodation for any part of MITRE’s employment process, please email View email address on click.appcast.io for general support and View email address on click.appcast.io for intern positions. This service is for individuals requiring reasonable accommodation requests. Please note that vendor solicitations will not receive a reply.Benefits information may be found here.Copyright 1997-2026, The MITRE Corporation. All rights reserved. MITRE is a registered trademark of The MITRE Corporation. Material on this site may be copied and distributed with permission only.Job SummaryJob number: R117847Profession: Engineering