Senior Cybersecurity Assessment Engineer

MITRE Technology and Engineering brings together technical expertise, applied research, and engineering to solve complex national challenges and turn emerging technologies into practical mission capabilities.

Within MITRE’s Cyber Engineering division, the Security Automation and Cyber Assessments department helps sponsors understand cyber risk, evaluate security effectiveness, and strengthen critical systems. We combine security automation with hands-on cyber assessments to deliver actionable findings and scalable approaches to improving cybersecurity.

Through initiatives such as SAF, ECHO, and ACT, we develop tools and assessment methods that reduce manual effort, improve consistency, and help organizations respond to evolving threats. Our work connects cybersecurity innovation with practical engineering to help sponsors make informed security decisions and achieve their missions.

We are seeking a Senior Cybersecurity Assessment Engineer to contribute technical expertise across the department’s assessment and cyber engineering portfolios. As a core member of the technical team and a primary technical point of contact for sponsors, this engineer will conduct assessments, translate findings into actionable recommendations, and help develop and apply automation capabilities. The role combines hands-on engineering, sponsor engagement, and technical leadership to address complex cybersecurity challenges.

Roles & Responsibilities:

• Support cybersecurity assessments in support of government sponsors and mission partners.
• Support the development of cybersecurity assessment methodologies and automation capabilities.
• Develop and maintain automation solutions that improve the efficiency and effectiveness of cybersecurity assessment activities.
• Analyze risks and provide recommendations to improve system security, resilience, and compliance.
• Perform vulnerability assessments and pentesting to communicate risks and mitigation strategies.
• Document technical findings, develop reports, and present assessment results and recommendations to sponsors, stakeholders, and technical teams.
• Collaborate effectively with MITRE, government sponsors, contractors, and other stakeholders to address cybersecurity challenges and mission needs.
• Promote collaboration with other organizational elements within the department and across MITRE.

• Minimum 5 years supporting cybersecurity engineering, assessment, testing, or automation.
• Bachelor of Science in Computer Science/Information Systems.
• Experience with cybersecurity tools, scripting, or automation technologies used to improve security operations and assessment capabilities.
• Familiarity with infrastructure automation technologies such as Ansible, Terraform, or CloudFormation.
• Familiarity with CI/CD pipelines and DevSecOps practices.
• Experience working with Windows and Linux operating systems.
• Experience developing software, scripts, or automation solutions using one or more programming languages such as Python, Java, C++, or C#.
• Ability to analyze technical systems, identify security risks, and communicate findings through written reports and technical documentation.
• Security certification (e.g., Security+, Network+, CEH, AWS Cloud Practitioner) or ability to obtain one.
• Must have an active Top Secret/SCI U.S Government issued Security Clearance. Per the U.S. Government’s eligibility requirements, you must be a U.S Citizen to be considered for a security clearance.
• This position requires a minimum of 4 days a week on-site, * Master’s degree or PhD in Cybersecurity, Computer Science, Engineering, or a related technical field.
• 8 years of experience conducting cybersecurity assessments, penetration testing, vulnerability analysis, or systems security engineering activities.
• Experience using cybersecurity assessment and testing tools such as Kali Linux, Burp Suite, Wireshark, Nessus, Nmap, or similar technologies.
• Experience supporting offensive and defensive cybersecurity operations, including vulnerability assessment and penetration testing activities.
• Experience securing, integrating, administering, or assessing enterprise IT environments, networks, cloud platforms, or mission systems.
• Knowledge of cybersecurity standards such as NIST RMF, NIST CSF, CMMC, ISO 27000 series, MITRE ATT&CK, STIGs, or CIS Benchmarks.
• Relevant cybersecurity certifications such as CISSP, GPEN, GCIA, GSEC, or comparable credentials.

At MITRE, your passion fuels work that impacts our nation and improves lives. This is where your skills strengthen national security, cybersecurity, health, transportation, and citizen services. We’re a nonprofit engineering, applied research, and advanced technology organization working in the public interest. With objectivity and integrity at our core, we lead federally funded research and development centers for U.S. government agencies - collaborating with industry and academia to deliver integrated, high-impact solutions that advance our nation’s health, security, and prosperity. Our people tackle the toughest technical challenges, supported by competitive benefits, meaningful career development, and a culture of innovation, collaboration, and technical excellence. Choose MITRE for a career with purpose - and help shape the future.