Job Abstract

Why choose between doing meaningful work and having a fulfilling life? At MITRE, you can have both. That's because MITRE people are committed to tackling our nation's toughest challenges—and we're committed to the long-term well-being of our employees. MITRE is different from most technology companies. We are a not-for-profit corporation chartered to work for the public interest, with no commercial conflicts to influence what we do. The R&D centers we operate for the government create lasting impact in fields as diverse as cybersecurity, healthcare, aviation, defense, and enterprise transformation. We're making a difference every day—working for a safer, healthier, and more secure nation and world. Our workplace reflects our values. We offer competitive benefits, exceptional professional development opportunities, and a culture of innovation that embraces diversity, inclusion, flexibility, collaboration, and career growth. If this sounds like the choice you want to make, then choose MITRE—and make a difference with us.

Department Summary:

MITRE’s Cybersecurity & Privacy Strategy and Policy department (L526) is situated in the MITRE Cyber Solutions Innovation Center within MITRE Labs, whose specialized capabilities support the entire corporation. With an eye on cybersecurity, privacy, and data protection, the department aims to help tackle the nation’s toughest challenges by providing expert staff and innovative capabilities in the areas of strategy development, governance, technical and organizational policy, risk management, and program development.  Looking toward emerging data protection and privacy challenges in areas such as AI and large data integration, the department is seeking an experienced data protection and privacy engineer to engage in both policy development and policy operationalization, including technical integration.

Roles & Responsibilities:

• Lead and / or contribute to a team that conducts organizational privacy maturity evaluations and contributes to privacy program development.
• Develop technical privacy controls for systems and technologies.
• Lead and/or contribute to a team that develops agency and organizational policies and procedures for implementing privacy controls, including controls relating to data subject consent, access controls, training and awareness, and public notice requirements.
• Perform technical analyses and develop data protection / privacy control requirements for technical architectures, including privacy enhancing technologies (PETs).  
• Collaborate in a public - private environment with senior US government leaders, respectfully offering assessments and recommendations.

Basic Qualifications:

• Bachelor’s degree in Computer Science, Data Analysis or related major and 8+ years applicable experience.
• Must be US citizen capable of obtaining and maintaining a US government clearance.
• 5+ years of professional experience in privacy and data protection
• Experience developing, applying, and assessing technical privacy controls for systems and technologies, including advanced capabilities such as AI and Internet of Things
• Demonstrated knowledge and experience with data protection and privacy risk management processes (e.g., methods for assessing and addressing risk), including both organizational and individual impacts and identifying engineering solutions to address them.
• Conceptual understanding of data models and data flow architecture
• Familiarity with data ethics frameworks
• Experience with advanced data processing capabilities (e.g., AI)
• Good written and verbal communication skills.
• Knowledge of laws, policies, procedures, or governance relevant to data protection and privacy
• This position requires a minimum of 50% hybrid on-site

Preferred Qualifications:

• Preference given to qualified candidates with active clearance.
• MS in data protection or privacy engineering, computer science, or related discipline.
• Familiarity with PETs, including de-identification techniques (e.g., differential privacy, k-anonymity), homomorphic encryption, and secure multi-party computation.
• Skill in managing client relationships, including determining client needs/requirements, managing client expectations, and demonstrating commitment to delivering quality results.
• Skill in project planning activities, to include preparation of functional and specific support plans, preparing and managing project correspondence, budget planning, and staff management.
• Professional privacy specialist certifications such as CIPP, CIPM, CIPT, and/or FIP.

This requisition requires the candidate to have a minimum of the following clearance(s):

This requisition requires the hired candidate to have or obtain, within one year from the date of hire, the following clearance(s):

Work Location Type:

MITRE is proud to be an equal opportunity employer. MITRE recruits, employs, trains, compensates, and promotes regardless of age; ancestry; color; family medical or genetic information; gender identity and expression; marital, military, or veteran status; national and ethnic origin; physical or mental disability; political affiliation; pregnancy; race; religion; sex; sexual orientation; and any other protected characteristics. For further information please visit the Equal Employment Opportunity Commission website EEO is the Law Poster and Pay Transparency.

MITRE intends to maintain a website that is fully accessible to all individuals. If you are unable to search or apply for jobs and would like to request a reasonable accommodation for any part of MITRE’s employment process, please email recruitinghelp@mitre.org.

Copyright © 2024, The MITRE Corporation. All rights reserved. MITRE is a registered trademark of The MITRE Corporation. Material on this site may be copied and distributed with permission only.