> Markdown version of [/jobs/ext/4565325-operational-technology-cyber-threat-intelligence-principal](https://www.wearedevelopers.com/jobs/ext/4565325-operational-technology-cyber-threat-intelligence-principal). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Operational Technology Cyber Threat Intelligence, Principal

- **Company:** MITRE Corporation
- **Location:** Washington, DC, United States
- **Experience:** Experienced
- **Salary:** $172,800.0 - $216,000.0
- **Contract:** Permanent contract
- **Skills:** Data Analysis, Communications Protocols, Cyber Security, Information Systems, Emulators, Ethernet, Supervisory Control and Data Acquisition (SCADA), Network Packet, Pcap, Modbus, OPC Unified Architecture, Security Information and Event Management, Transmission Control Protocol (TCP), Traffic Analysis, Wireshark, Data Logging, Mitre Att&ck, Cyber Threat Analysis, Information Technology, Process Control Systems, Operational Systems
- **Published:** November 4, 2026
- **Apply:** https://careers.mitre.org/us/en/job/R117961

## About the Role

strategic briefings tailored for both technical engineering teams and leadership

**Basic Qualifications:**

- Typically requires a minimum of 10 years of related experience with a bachelor's degree; or 8 years and a master's degree; or a PhD with 5 years' experience; or equivalent combination of related education and work experience.
- **Education:** Degree in Computer Science, Cybersecurity, Information Systems, Intelligence Studies, Strategic Intelligence, or related field.
- **Direct OT Environment Experience:** Minimum 2 years of hands-on experience analyzing, securing, or threat-modeling Operational Technology (OT), Industrial Control Systems (ICS), SCADA environments, or Space OT systems. (Experience limited to enterprise IT security will not satisfy this requirement.)
- **Industrial Protocol & Control Architecture Familiarity** : Working understanding of common industrial communication protocols (e.g., Modbus TCP, DNP3, OPC UA/DA, Ethernet/IP) and lower-level control architecture (Purdue Model Levels 0-3).
- **ICS Threat Framework Application:** Demonstrated experience applying ATT&CK for ICS, SPARTA, or Cyber Kill Chain for ICS to dissect adversary campaigns and analyze cyber-physical attack paths.
- **Must have an active Top Secret** U.S Government issued Security Clearance and **must be eligible to obtain and maintain** a **Top Secret/SCI** U.S Government issued Security Clearance. Per the U.S. Government's eligibility _requirements, you must be a U.S Citizen to be considered for a security clearance._
- This position requires a minimum of 3 days a week on-site.

**Preferred Qualifications:**

- **Education:** Advanced degree in a relevant technical field.
- **Active Clearance:** Active TS/SCI security clearance.
- **IT/OT Integrated Threat Modeling & Analytics:** Experience creating hybrid IT/OT threat models, building associated adversary emulation content, and developing targeted OT detection analytics. Experience working with large-scale security logging frameworks (such as CyberSentry or enterprise SIEM architecture).
- **PCAP & Traffic Analysis:** Experience performing network packet capture analysis (e.g., Wireshark, Zeek) on industrial protocol traffic to differentiate normal operations from malicious commands.
- **Emulation & Red Teaming Collaboration:** Experience partnering with red teams, penetration testers, or adversary emulation developers on threat simulation exercises.
- **Industry Certifications:** Relevant OT/ICS certifications such as GIAC Global Industrial Cybersecurity Professional (GICSP), GIAC Response and Industrial Defense (GRID), or GIAC Critical Infrastructure Protection (GCIP).
- **Government & Sector Advisory:** Experience partnering with organizations such as CISA, DoD, or