Principal Incident Responder - ICS/OT Cybersecurity

Dragos

87d • $176,000 - $176,000

About The Position

Dragos is on a relentless mission to defend industrial organizations that provide us with the necessities of modern civilization; running water, functioning electricity, and safe industrial working environments. As the market leader in ICS/OT Cybersecurity, we are dedicated to arming our customers with best-in-class technology, threat intelligence, and services to protect their systems as effectively and efficiently as possible. We’re a remote-first culture with operations in North America, Europe, the Middle East, and APAC. We’re looking for mission-oriented teammates who embody our core values of authenticity, transparency, and trust. Are you ready to make a difference? Come join a mission that can save the world!

Requirements

• US Citizenship is required.
• 7+ years of hands-on digital forensics experience with expertise in at least two areas: network, memory or disk - focused on methodology over specific tools.
• Proven ability to lead end-to-end investigations, correlating events and pivoting across data types to uncover threats.
• Experience hunting and identifying malicious activity, including managing communications and response during incidents.
• Strong technical proficiency with Windows and Linux systems, networking concepts (TCP/IP, Ethernet, etc.), and security tools such as Wireshark, Snort, Zeek, Yara and Sigma.
• Excellent communication skills, with the ability to guide customers through high-pressure incidents and handle situations calmly and with confidence.
• Willingness to travel for onsite engagements and to support non-standard working hours as needed.
• Ability to work independently in a remote environment and coordinate across distributed teams.
• Willingness to travel up to 40% (domestic and international) to support customer engagements.

Nice To Haves

• Exposure to ICS/OT cybersecurity is a major plus.
• Prior consulting experience is preferred.

Responsibilities

• Lead and execute incident response engagements for industrial customers, including investigations, threat hunts, triage, and crisis management, both onsite and remotely.
• Guide customers through critical situations by serving as Incident Commander, delivering ad hoc guidance, and ensuring clear communication throughout the response lifecycle.
• Strengthen customer resilience by developing playbooks, conducting tabletop exercises (TTXs), leading incident response planning workshops, and supporting assessments and architecture reviews.
• Collaborate and innovate with internal teams to identify service improvements and enhance engagement outcomes.
• Mentor and develop teammates by providing training and hands-on guidance during incidents and across engagements.
• Champion the Dragos mission by representing the company with clients, in the community, and through outreach opportunities.
• Participate in the Incident Response on-call rotation.

Benefits

• Salary: $176,000
• Competitive Equity Package
• Comprehensive Benefits Plan

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Number of Employees: 501-1,000 employees