Apply on Employer Site

MIT Lincoln Laboratory · 21 hours ago

Cybersecurity Analyst Energy Control Systems

Lexington, MA

Full-time

Hybrid

Mid, Senior Level

$145K/yr - $220K/yr

2+ years exp

MIT Lincoln Laboratory is focused on securing the nation from energy-related threats through its Energy Systems Group. The Cybersecurity Analyst will work with cross-disciplinary teams to enhance the resilience of energy control systems and provide guidance to U.S. government leaders.

BiotechnologyInformation TechnologyNational SecuritySecurity

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Work with a team to analyze and develop architectures, software, and security controls to increase the resilience of energy control systems that interface with microgrid equipment, protection relays, generators, critical loads, batteries, solar, and power converters

Work hands-on with our existing power system control system testbeds to develop algorithms, perform data analysis, interface software with hardware devices, and manage the resulting data

Travel to Department of Defense installations to determine existing capabilities, design mission and system tests, and to improve the security and resilience of those systems

Qualification

Cybersecurity of control systemsHigh-level programming languagesReal-time hardware platformsVulnerability assessmentsSystem programming languagesCloud services provisioningElectrical infrastructure knowledgeIndustrial control protocolsZero trust architectureCryptographic principlesAnomaly detection techniques

Required

Doctoral degree in Computer Science, Computer Engineering, Electrical Engineering, Mechanical Engineering, or related field or a Master's degree with 2-5+ years of work experience

Experience reverse engineering or performing vulnerability assessments of control systems

Proficient at high-level programming languages (e.g., Python, Matlab) and real-time hardware and simulation platforms (e.g., RTDS, OPAL-RT, Typhoon)

Knowledge to develop, implement, test and evaluate new algorithms and concepts

Ability to work effectively with a high level of uncertainty and conflicting or limited information

Ability to quickly learn new technical areas and apply that knowledge to solve challenging problems

The ability to clearly present complicated technical concepts to a wide range of audiences

Preferred

Familiarity with electrical infrastructure and documentation (e.g., one-line diagrams)

Familiarity with industrial control system protocols (e.g., Modbus, IEC 61850, DNP3, OPC, BACnet) and network analysis tools (e.g., Wireshark or Zeek)

Knowledge of system programming languages (e.g., C/C++, Rust, or Go)

Familiarity with zero trust architecture concepts and principles

Familiarity with relevant control system and cybersecurity frameworks and guidelines (e.g., NIST 800-82r3, UFC 4-0101-6, NIST 800-207, DODI 8510.01)

Familiarity with architecting and provisioning cloud services, particularly using Infrastructure-as-Code methodologies and tools

Familiarity with any of the following security areas: Basic cryptographic principles and their practical application (e.g., ECC, RSA, JWT), Penetration testing, adversary emulation, or red team operations, Anomaly or intrusion detection techniques and systems