FM Research Cybersecurity Graduate Co-op - MITRE ATTCK for ICS

FM is a leading property insurer of the worlds largest businesses providing more than onethird of FORTUNE 1000size companies with engineeringbased risk management and property insurance solutions. FM helps clients maintain continuity in their business operations by drawing upon stateoftheart lossprevention engineering and research; risk management skills and support services; tailored risk transfer capabilities; and superior financial strength. To do so we rely on a dynamic culturally diverse group of employees working in more than 100 countries in a variety of challenging roles.

We are seeking a highly motivated and detailoriented coop student to join our cybersecurity team. The successful candidate will contribute to the continuous development of cyber mitigation strategies for Operational Technology (OT) environments leveraging the MITRE ATT&CK for ICS matrix. This position offers handson experience in designing attack experiments evaluating mitigation techniques and supporting the development of testbeds for validating security measures. The coop student will also be involved in producing technical documentation and utilizing threat intelligence to enhance our cybersecurity posture.

• Testbed Support
  • Assist in the development and maintenance of testbeds for validating cyber mitigation strategies.
  • Interest in configuring and troubleshoot hardware and software components within the testbed environment including industrial devices (PLC HMI DCS RTU etc. and industrial software (e.g. OPC UA/DA PI historians user repositories firewall management including inspection etc..
• MITRE ATT&CK for ICS Expertise
  • Leverage MITRE ATT&CK for ICS matrix to understand adversarial tactics techniques and procedures in industrial control systems.
  • Research and propose mitigation strategies to address specific threats identified within the MITRE ATT&CK for ICS framework.
• Run Experiments
  • Design and document attack experiments to simulate realworld cyber threats against OT environments.
  • Focus on attack strategies that are shifting from immediate exploitation to establishing persistent footholds within OT environments.
  • Incorporate techniques such as exploiting supply chains and living off the land.
• Analysis of Run Experiments
  • Evaluate the effectiveness of proposed IT and OT mitigation strategies in preventing or mitigating the impact of simulated attacks.
  • Analyze the results of experiments and provide recommendations for improving mitigation techniques.
• Technical Documentation
  • Produce clear and concise slipsheets technical reports and presentations summarizing research findings and experimental results.
  • Document IT and OT attack methodologies mitigation strategies and testbed configurations.
• Threat Intelligence and Research
  • Leverage threat intelligence feeds and research capabilities to stay informed about emerging cyber threats and vulnerabilities.
  • Analyze threat intelligence data to identify relevant threats to our OT environment and propose proactive security measures.
  • Use platforms and frameworks to improve and automate threat research.

• Currently enrolled in a Masters degree program in Cybersecurity Computer Science Engineering or a related field.
• Familiarity with industrial control systems (ICS) and operational technology (OT) concepts.
• Understanding of cyberattack methodologies and mitigation techniques.
• Knowledge of the MITRE ATT&CK framework particularly the ICS matrix.
• Interest in designing and conducting experiments or simulations.
• Analytical and problemsolving skills.
• Fluency in English written and verbal communication skills.
• Ability to work independently and as part of a team.

Preferred Skills

• Experience with penetration testing or ethical hacking.
• Knowledge of network security principles and technologies.
• Familiarity with scripting languages such as Python or PowerShell.
• Experience with virtualization technologies such as VMware or VirtualBox.
• Understanding of threat intelligence concepts and tools.

This coop position offers a valuable opportunity to gain practical experience in the field of OT cybersecurity and contribute to the development of innovative mitigation strategies.

This is an inoffice role based in Norwood MA. Temporary relocation support provided for selected qualified candidate.

FM is an Equal Opportunity Employer and is committed to attracting developing and retaining a diverse workforce.

#LITA1