Cybersecurity Manager – Cyber Threat Intelligence and Metrics

The Security Department’s overall mission is to identify and counter security threats to MIT Lincoln Laboratory’s mission of development of game-changing technology in support of National Security, including guarding against compromise by foreign intelligence agencies and insider threats. To accomplish this mission, this department formulates and implements policies, plans, and actions designed to protect facilities against threats of vandalism, accidental destruction, and sabotage; and safeguards personnel, classified and unclassified information systems, personal identifiable information, property, and other assets from exploitation and recruitment by foreign intelligence agencies.

We foster a diverse and inclusive culture where security professionals from a wide range of backgrounds are empowered to solve complex security problems in close collaboration with Laboratory research teams and Government counterparts. Our people are our most important resource, and we encourage a casual and flexible opportunity-filled working environment that is technology-focused. Where mission needs can be met, the Security Services Department encourages flexible schedules and hybrid remote work arrangements.

MIT Lincoln Laboratory is a Federally Funded Research and Development Center (FFRDC) whose mission is research in support of National Security.

• Mission – The Security Services Department’s (SSD) overall mission is to identify and counter security threats to the MIT Lincoln Laboratory’s (MIT LL) mission of development of game-changing technology in support of national security, including guarding against compromise by foreign intelligence agencies and insider threats.
• Culture – We foster an inclusive, opportunity-filled environment of empowered team members from diverse backgrounds

• The Manager, Cybersecurity Threat Intelligence and Metrics reports to the Chief Information Security Officer (CISO). The Manager serves as the central leader responsible for maturing and operationalizing two critical programs: the Laboratory’s Cyber Threat Intelligence (CTI) Program and the Cybersecurity Metrics Program. The role will mature and oversee a cohesive function that provides actionable intelligence and standardized, data-driven cybersecurity insights to enable executive decision-making, risk management and mitigation, and cybersecurity program effectiveness.

• Lead a matrixed cross-functional team of cybersecurity professionals responsible for both Cyber Threat Intelligence and Cybersecurity Metrics by establishing a functional program charter, setting goals and objectives and monitoring daily operations and reporting in alignment with defined delivery timelines.
• Provide direct supervision in the definition and maintenance of program charters, operating procedures, intelligence reporting, risk metrics, budgets and governance structures.
• Identify and explore required changes in managing risk according to cybersecurity threat intelligence and metrics and align programs with overall Laboratory strategic objectives, enterprise cybersecurity strategy, cybersecurity threat and risk management goals, and regulatory compliance requirements.

• Direct the collection, analysis, and dissemination of actionable cyber threat intelligence from government, industry, commercial, and open-source channels.

• Oversee production of tailored intelligence reports, advisories, and threat assessments for executive, operational, and tactical audiences.
• Provide ongoing program reports to executive leadership and cross-functional stakeholders.
• Maintain and update adversary profiles, actor TTP mappings, and geopolitical risk assessments.
• Serve as the primary liaison for external information-sharing partnerships, including ISACs, vendors, and government partners.
• Integrate threat intelligence outputs into supply chain risk management, cyber risk assessments, incident response, vulnerability management, and proactive defense workflows.
• Ensure timely alerts on critical vulnerabilities, campaign activity, or threat actor shifts and provide regular proactive threat awareness training to key MIT LL personnel.
• Own the enterprise framework for cybersecurity performance metrics covering vulnerabilities, compliance, and cyber risk exposure.
• Lead the design, testing, and implementation of automated dashboards, threat indicator sharing and reports for executive leadership, risk committees, threat hunting and operational teams.
• Define standardized metrics definitions, data models, and collection methods to ensure consistency and integrity across departments.
• Oversee routine and ad-hoc reporting cycles, ensuring accurate, timely, and actionable output.
• Partner with the program management offices, analytics teams, and other critical enterprise elements.
• Maintain a centralized repository for metrics and reporting artifacts.
• Analyze data trends to identify emerging risks and inform strategic investment priorities.
• Supervise and mentor a matrixed multidisciplinary team. Balance resources and workload between two specialized functional areas.
• Promote collaboration with incident responders, risk management, compliance, and executive leadership.
• Drive engagement and accountability across all stakeholders.

• Must be a U.S. Citizen
• education: Bachelor’s degree in Cybersecurity, Computer Science, Data Analytics, or related field (Master’s preferred).
• experience: 8+ years of combined experience in cybersecurity, intelligence analysis, or security metrics/governance. Experience will be considered in lieu of a degree
• Leadership: 3+ years of experience in a leadership, management, or team lead role.
• Understanding of cyber threat intelligence methodologies, frameworks (MITRE ATT&CK, Diamond Model), and intelligence lifecycle.
• Proficiency in data analytics, dashboarding (e.g., Power BI, Tableau, Splunk, or ELK), and KPI/KRI design.
• Familiarity with enterprise security operations, vulnerability management, and risk frameworks (NIST CSF, etc.).
• Knowledge of common intelligence sources (OSINT, ISACs, government advisories) and automation tools.
• Strong written and verbal communication skills, capable of tailoring complex information for diverse audiences.
• Occasional local and domestic overnight travel will be required
• Selected candidate will be subject to a pre-employment background investigation
• ***Must have active Secret Clearance with the ability to be able to obtain and maintain a Top Secret DoD security clearance with Sensitive Compartmented Information (SCI) and Special Access Program (SAP) eligibility.

• Proven ability to build, lead, and develop multidisciplinary teams.
• Excellent organizational and prioritization skills in managing concurrent programs.
• Demonstrated success in establishing governance, standardization, and cross-functional collaboration.
• Strategic thinker capable of balancing tactical execution with long-term vision.
• Successful experience in consolidation of CTI and metrics functions under unified governance.
• Delivered standardized, enterprise-wide cybersecurity metrics adopted by key stakeholders.
• Regularly produced intelligence deliverables used by executive, operational, and tactical teams.
• Received positive feedback from stakeholders on clarity, value, and impact of outputs.

You will find significant opportunities to do meaningful work in an environment intentionally designed to be one where you will learn, thrive and belong.

• Leadership: Room to advance on your team or to lead cross-functional projects.
• Growth Opportunities: Potential for lateral and vertical movement.
• Education/Training: Management training, mentorship, in-house and external courses.
• Exposure: Engagement with sponsors, stakeholders, Laboratory leadership and other Departments and Divisions.
• Community: Participation is encouraged for Laboratory social events, Employee Resource Groups (ERGs), clubs and study groups, volunteering and community service projects.