Principal Cyber Intelligence Engineer
Required skills
- Cyber Threat Intelligence
- MITRE ATT&CK
- Diamond Model
- Intrusion Analysis
- Malware Analysis
- Threat Actor Profiling
- Adversary Campaign Tracking
- Cyber Risk Analysis
- Incident Response
- Detection Engineering
Nice to have
- Adversary Emulation
- Defensive Cyber Operations
- Cyber Deception
- Adversary Engagement
- Cyber Forensics
- Network Architecture Analysis
Role summary
MITRE's Cyber Threat Intelligence department seeks a Principal Cyber Intelligence Engineer to support government and private sector sponsors. This role involves applying cyber intelligence expertise to solve complex problems, including defensive cyber operations, securing weapons systems, assessing critical infrastructure threats, and analyzing intelligence reporting. The engineer will guide sponsors in building cyber intelligence capabilities, review tools, recommend best practices, and conduct research and development. Key responsibilities include using MITRE ATT&CK®, performing technical threat analysis (intrusion, malware, threat actor profiling), and evaluating CTI tools, platforms, and emerging technologies like AI/ML. The role emphasizes integrating CTI with threat hunting, detection engineering, incident response, vulnerability management, and cyber risk analysis. A minimum of 8 years of experience with a Master's degree is required, along with knowledge of adversary tradecraft and U.S. government cybersecurity agencies. Strong leadership and communication skills are essential. This is an onsite position requiring a Top Secret security clearance and U.S. citizenship.
Department Summary:
MITRE’s Cyber Threat Intelligence department is seeking a Principal Cyber Intelligence Engineer to join our team and apply your skills in support of our government and private sector sponsors. You will advance our research and innovation in cyber intelligence, lead projects and tasks, and collaborate across MITRE to help shape our work and capability. Our staff work with government, industry, and academia, enabling the public and private sector to make better decisions and implement solutions to complex challenges of national and global significance.
Roles & Responsibilities:
- Apply cyber intelligence expertise to help our sponsors solve their hardest problems, ranging from enabling defensive cyber operations, securing weapons systems, assessing threats to critical infrastructure, and analyzing intelligence reporting to enable cyber effects.
- Help sponsors understand how cyber intelligence fits into mission needs their organization, whether as a core part of their mission or as an important function in their security organization.
- Guide sponsors in building and advancing cyber intelligence capabilities and programs.
- Review sponsor tools and recommend best practices, analytic methodologies, and opportunities to integrate AI.
- Propose and perform research and development to advance the state of the art in cyber intelligence.
- Use or contribute to MITRE ATT&CK® to help the global cybersecurity community understand threat behaviors.
- Demonstrate expertise in technical threat analysis, including intrusion analysis, malware analysis, threat actor profiling, infrastructure analysis, and adversary campaign tracking.
- Evaluate and apply CTI tools, platforms, data sources, automation, and emerging technologies, including artificial intelligence and machine learning, to improve intelligence collection, analysis, correlation, and dissemination.
- Develop innovative approaches to integrating cyber threat intelligence with threat hunting, detection engineering, incident response, vulnerability management, and cyber risk analysis.
Basic Qualifications:
- Typically requires a minimum of 10 years of related experience with a Bachelor’s degree; or 8 years and a Master’s degree; or a PhD with 5 years’ experience; or equivalent combination of related education and work experience.
- Knowledge of adversary tradecraft and their utilization of cyber operations as a tool of military force and statecraft.
- Experience with U.S. government cybersecurity agencies, intelligence agencies, authorities, and relationships.
- Strong leadership and communication skills to effectively mentor teams and collaborate with diverse groups of internal and external stakeholders.
- Demonstrated application of MITRE ATT&CK® within operational environments and other structured frameworks and analytic techniques (e.g., Diamond Model).
- Familiarity with all-source intelligence databases and analytic tools.
- Must be eligible to obtain and maintain a Top Secret U.S Government issued Security Clearance. Per the U.S. Government’s eligibility requirements, you must be a U.S Citizen to be considered for a security clearance.
- This position requires a minimum of 4 days a week on-site.
Preferred Qualifications:
- Experience building and managing CTI teams and overseeing the production of strategic, operational, and tactical products and services.
- Experience with Threat Intelligence Platforms (TIPs), including configuring TIPs according to stakeholder requirements.
- Hands on technical expertise in any of the following additional areas: adversary emulation, defensive cyber operations, cyber analytics & malware analysis, cyber deception and adversary engagement, cyber effects and reverse engineering, and cyber forensics.
- Familiarity with adversarial C2 hardware and software.
- Familiarity with supporting basic, intermediate, and advanced target development.
- Familiarity with vulnerability identification
- Familiarity with network architecture analysis
- Advanced knowledge of MITRE ATT&CK® and adversary behavioral analysis
- Experience integrating CTI with threat hunting, detection engineering, and incident response.
This requisition requires the candidate to have a minimum of the following clearance(s):
NoneThis requisition requires the hired candidate to have or obtain, within one year from the date of hire, the following clearance(s):
Top SecretSalary compensation range and midpoint:
$172,800 - $216,000 - $259,200 AnnualWork Location Type:
OnsiteIt is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local or international law.
MITRE intends to maintain a website that is fully accessible to all individuals. If you are unable to search or apply for jobs and would like to request a reasonable accommodation for any part of MITRE’s employment process, please email recruitinghelp@mitre.org for general support and collegerecruiting@mitre.org for intern positions. This service is for individuals requiring reasonable accommodation requests. Please note that vendor solicitations will not receive a reply.
Benefits information may be found here.
Copyright © 1997-2026, The MITRE Corporation. All rights reserved. MITRE is a registered trademark of The MITRE Corporation. Material on this site may be copied and distributed with permission only.Similar roles
- Associate AI and Decision EngineerMitre Media · Mclean, VA · Hybrid
- Senior SATCOM EngineerMitre Media · Colorado Springs, CO · Hybrid
- Senior Sensor Intelligence Engineer (Tools & Validation)Whoop · Boston, MA · Onsite
- Business Intelligence EngineerCrossCountry Consulting · Mclean, VA · Hybrid
- PBusiness Intelligence EngineerPenn Interactive · Remote · Remote
Business Intelligence EngineerBooz Allen Hamilton · Mclean, VA · Hybrid
