Cyber Operations Analyst

Department Summary:

MITRE is seeking a Cyber Analyst to join our Digital Investigations Department and contribute to challenging national security, law enforcement, cyber, and public-interest missions.

Our work focuses on transforming digital data into actionable understanding. We combine technical analysis, investigative tradecraft, data analytics, and mission context to answer difficult questions, reconstruct events, identify malicious activity, reveal relationships, and support operational decision-making.

Our staff work across a range of digital investigation specialties, including digital evidence and forensics, open-source and digital intelligence, investigative analytics, adversary and activity analysis, operational investigations, and the development of new investigative capabilities and tradecraft.

This position is well suited for a technical professional who enjoys solving ambiguous problems, working with diverse types of digital data, learning new technologies, and applying technical skills to real-world investigative challenges.

Roles & Responsibilities:

In this role, the selected candidate may contribute to efforts that:

• Acquire and Analyze Digital Evidence: Collect, preserve, examine, and interpret digital data from endpoints, mobile devices, networks, cloud environments, applications, and other digital sources.
• Conduct Digital Intelligence and OSINT Analysis: Collect and analyze publicly available and online information, which may include social media, online identities, digital infrastructure, cryptocurrency activity, dark web sources, and other internet-based data.
• Perform Investigative Data Analysis: Fuse, correlate, analyze, and visualize information from multiple sources to identify relationships, reconstruct events, resolve entities, discover patterns, and generate investigative insights.
• Analyze Targets and Malicious Activity: Examine people, organizations, infrastructure, software, and digital behavior to better understand adversaries, campaigns, malicious activity, and complex digital interactions.
• Support Operational Investigations: Apply technical and analytical methods to cyber, law enforcement, counterintelligence, insider threat, fraud, and other national security investigations and use findings to inform operational decisions.
• Develop Investigative Capabilities and Tradecraft: Prototype and evaluate tools, automation, AI-enabled approaches, analytical methods, standards, and workflows that make digital investigations more effective, scalable, and repeatable.
• Evaluate Investigative Technologies: Assess tools, platforms, datasets, and emerging technologies to understand their strengths, limitations, and applicability to investigative missions.
• Communicate Technical Findings: Develop clear analytical products, visualizations, briefings, and technical documentation that explain findings and their implications to both technical and non-technical audiences.
• Collaborate Across Disciplines: Work with investigators, analysts, software engineers, data scientists, researchers, mission experts, and sponsor stakeholders to solve complex problems.
• Explore Emerging Problems: Research unfamiliar technologies, datasets, and investigative challenges; develop hypotheses; test analytical approaches; and identify new opportunities for technical innovation.

Basic Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Data Science, Digital Forensics, Information Technology, Engineering, Intelligence Studies, or a related technical or analytical discipline, or an equivalent combination of education and relevant experience.
• Approximately 2 years of relevant professional, academic, research, internship, military, or law enforcement experience involving cybersecurity, digital investigations, data analysis, intelligence analysis, software or systems analysis, or a related area.
• Foundational experience in one or more areas relevant to digital investigations, such as digital forensics, cybersecurity, OSINT, threat intelligence, data analytics, network analysis, malware analysis, software analysis, or investigative research.
• Demonstrated ability to approach ambiguous technical or analytical problems, evaluate available information, develop hypotheses, and draw supportable conclusions.
• Ability to work with structured or unstructured data and identify meaningful patterns, relationships, or anomalies.
• Strong written and verbal communication skills and the ability to explain technical concepts and analytical findings clearly.
• Curiosity and willingness to learn unfamiliar technologies, tools, data sources, and mission areas.
• Ability to work both independently and collaboratively as part of multidisciplinary teams.
• Must be eligible to obtain and maintain a Top Secret U.S Government issued Security Clearance. Per the U.S. Government’s eligibility requirements, you must be a U.S Citizen to be considered for a security clearance.
• This position requires a minimum of 3 days onsite.

Preferred Qualifications:

Experience or coursework in one or more of the following areas is preferred but not required:

• Digital forensics or digital evidence acquisition and analysis, including endpoint, mobile, network, cloud, or application data.
• Open-source intelligence, social media analysis, dark web research, online identity analysis, cryptocurrency or blockchain analysis, or digital infrastructure analysis.
• Cyber threat intelligence, adversary tracking, malware analysis, attribution analysis, incident response, or intrusion analysis.
• Data analysis, entity resolution, link analysis, graph analysis, statistics, data visualization, or analysis of large and complex datasets.
• Programming or scripting using languages such as Python, R, JavaScript, PowerShell, or similar technologies.
• Development of analytical tools, automation, prototypes, or repeatable technical workflows.
• Application of artificial intelligence, machine learning, or large language models to analytical or investigative problems.
• Familiarity with investigative, forensic, intelligence, data analytics, or security platforms and tools.
• Experience conducting technical research, experimentation, tool evaluation, or comparative analysis.
• Experience working with law enforcement, national security, intelligence, cyber operations, fraud, insider threat, or related mission areas.
• Previous experience working in a classified environment or possession of an active U.S. government security clearance.

This requisition requires the candidate to have a minimum of the following clearance(s):

This requisition requires the hired candidate to have or obtain, within one year from the date of hire, the following clearance(s):

Salary compensation range and midpoint:

Work Location Type:

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local or international law.

MITRE intends to maintain a website that is fully accessible to all individuals. If you are unable to search or apply for jobs and would like to request a reasonable accommodation for any part of MITRE’s employment process, please email recruitinghelp@mitre.org for general support and collegerecruiting@mitre.org for intern positions. This service is for individuals requiring reasonable accommodation requests. Please note that vendor solicitations will not receive a reply.

Benefits information may be found here.