Operational Technology Cyber Threat Intelligence, Principal

strategic briefings tailored for both technical engineering teams and leadership</li></ul><p> </p><p>Basic Qualifications:</p><ul><li>Typically requires a minimum of 10 years of related experience with a bachelor’s degree; or 8 years and a master’s degree; or a PhD with 5 years’ experience; or equivalent combination of related education and work experience.</li><li>Education: Degree in Computer Science, Cybersecurity, Information Systems, Intelligence Studies, Strategic Intelligence, or related field.</li><li>Direct OT Environment Experience: Minimum 2 years of hands-on experience analyzing, securing, or threat-modeling Operational Technology (OT), Industrial Control Systems (ICS), SCADA environments, or Space OT systems. (Experience limited to enterprise IT security will not satisfy this requirement.)</li><li>Industrial Protocol & Control Architecture Familiarity: Working understanding of common industrial communication protocols (e.g., Modbus TCP, DNP3, OPC UA/DA, Ethernet/IP) and lower-level control architecture (Purdue Model Levels 0-3).</li><li>ICS Threat Framework Application: Demonstrated experience applying ATT&CK for ICS, SPARTA, or Cyber Kill Chain for ICS to dissect adversary campaigns and analyze cyber-physical attack paths.</li><li>Must have an active Top Secret U.S Government issued Security Clearance and must be eligible to obtain and maintain a Top Secret/SCI U.S Government issued Security Clearance. Per the U.S. Government’s eligibility requirements, you must be a U.S Citizen to be considered for a security clearance.</li><li>This position requires a minimum of 3 days a week on-site.</li></ul><p> </p><p>Preferred Qualifications:</p><ul><li>Education: Advanced degree in a relevant technical field.</li><li>Active Clearance: Active TS/SCI security clearance.</li><li>IT/OT Integrated Threat Modeling & Analytics: Experience creating hybrid IT/OT threat models, building associated adversary emulation content, and developing targeted OT detection analytics. Experience working with large-scale security logging frameworks (such as CyberSentry or enterprise SIEM architecture).</li><li>PCAP & Traffic Analysis: Experience performing network packet capture analysis (e.g., Wireshark, Zeek) on industrial protocol traffic to differentiate normal operations from malicious commands.</li><li>Emulation & Red Teaming Collaboration: Experience partnering with red teams, penetration testers, or adversary emulation developers on threat simulation exercises.</li><li>Industry Certifications: Relevant OT/ICS certifications such as GIAC Global Industrial Cybersecurity Professional (GICSP), GIAC Response and Industrial Defense (GRID), or GIAC Critical Infrastructure Protection (GCIP).</li><li>Government & Sector Advisory: Experience partnering with organizations such as CISA, DoD, or

Sector Risk Management Agencies (SRMAs) on threat reporting and mitigation guidance.</li></ul><p> </p><p style="text-align:inherit"></p><p style="text-align:left">This requisition requires the candidate to have a minimum of the following clearance(s):</p>Top Secret<p style="text-align:inherit"></p><p style="text-align:left">This requisition requires the hired candidate to have or obtain, within one year from the date of hire, the following clearance(s):</p>Top Secret/SCI<p style="text-align:inherit"></p><p style="text-align:left">Salary compensation range and midpoint:</p>$172,800 - $216,000 - $259,200 Annual<p style="text-align:inherit"></p><p style="text-align:left">Work Location Type:</p>Onsite<p style="text-align:inherit"></p><p style="text-align:left">It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be