MITRE Security Engineer reviews

Less perks / monetary benefits

I am sponsor-facing and have been trying to get sponsors to adopt some of our recent work. It’s increasingly difficult when we look like we do not communicate internally and have no long term plan. Example: Last year Mitre published a cyber defense framework called Shield. While it was far from perfect, it aligned with ATT&CK and made sense to sponsors. Then a few months ago, we released D3fend, yet another cyber defense framework, but very theoretical and unapproachable for most sponsors. Now, just weeks ago, yet another cyber defense framework which is geared towards an engaging with cyber adversaries and again a non-starter for most of our sponsors. I hate to even discuss these anymore because I can’t explain the differences and why we released 3 similar things in less than a year! We look clueless! This is just one example of many that show a lack of coordination and communication!