Note: The job is a remote job and is open to candidates in USA. Dragos is a global leader in xOT cybersecurity, protecting critical infrastructure through technology, threat intelligence, and expert services. The Senior OT Security Analyst will lead monitoring and triage operations, investigate suspicious activity in customer operational technology environments, support threat hunters and incident responders, and help maintain and improve the Dragos Platform.
Responsibilities
- Lead shift operations, guiding analysts as they triage detection alerts and network telemetry from the Dragos Platform across customer OT environments — stepping in as shift leader for your region when needed
- Serve as a senior investigator, digging into suspicious activity to identify misconfigurations, anomalies, and potential malicious behavior across industrial networks
- Apply deep analysis and context to escalate findings to Incident Responders and threat hunters with clear, actionable documentation
- Partner across teams — analysts, threat hunters, incident responders, platform engineers, and Detection Engineering — to tune detection logic, reduce false positives, and shape new Dragos Platform detections and playbooks
- Write and deliver incident summaries and operational reports that give internal stakeholders and customers a clear read on what's happening in their environment
- Support the full scope of OT Watch Complete, from asset classification and vulnerability management to hardening recommendations and direct customer information requests
- Build expertise continuously in ICS/OT protocols, adversary tradecraft, and threat intelligence specific to industrial environments
Skills
- 3–5 years of experience in network security, ideally with hands-on exposure to real-world threat investigation
- Solid understanding of core networking concepts — TCP/IP, firewalls, DNS, packet analysis
- Hands-on experience with security monitoring tools, such as IDS/IPS, SIEM platforms, or network traffic analyzers
- Strong written and verbal communication skills, with close attention to detail
- Genuine interest in ICS/OT cybersecurity and a drive to defend critical infrastructure, paired with the ability to pick up complex, industrial-specific concepts quickly and apply them
- Comfortable working independently in a remote environment while coordinating across distributed teams
- Experience working on a Security Operations Center (SOC) team
- Familiarity with OT protocols (e.g., Modbus, DNP3, Ethernet/IP) and ICS environments
- Applied knowledge of adversary tactics and frameworks relevant to OT (e.g., MITRE ATT&CK for ICS)
- Hands-on lab or internship experience in cybersecurity operations, threat hunting, or digital forensics
- Experience in packet capture (PCAP) analysis or basic scripting (e.g., Python, Bash)
Benefits
- Competitive Equity Package
- Comprehensive Benefits Plan
- Remote-first mission-driven team
Company Overview