Associate Principal Incident Responder

Free resume; Deutschland; Remote; EUR 100,000 - 140,000; Full time

Job summary

Dragos is seeking an Associate Principal Incident Responder in Germany to lead OT incident response and strengthen customer IR maturity across Europe. You will run active investigations, deliver advisory work, and enhance IR methodologies while representing Dragos as a thought leader.

This role is ideal for practitioners who excel at investigations and strategic advisory. Responsibilities include leading IR engagements, acting as Incident Commander, driving root-cause analysis, conducting

Qualifications

• Must be a German resident.
• Fluent in German with working proficiency in English.
• 8+ years of hands-on incident response and digital forensics experience, with lead-level depth in at least two of network, hardware, memory, or disk forensics.

Responsibilities

• Lead incident response engagements for industrial customers, onsite and remotely, including investigations, threat hunts, triage, and compromise assessments.
• Serve as Incident Commander during active incidents, delivering decision-grade guidance and managing communications throughout the response lifecycle.
• Drive investigations to resolution across industrial environments, from root-cause analysis to containment and remediation strategy, with participation in the on-call rotation.
• Own the post-incident loop by conducting after-action reviews and feeding lessons learned into playbooks and procedures.
• Deliver advisory services such as IR planning workshops, tabletop exercises, and maturity assessments that align response capabilities with business risk.
• Mentor teammates and act as a technical escalation point, while staying accountable for delivery quality, timeliness, and utilization.
• Build customer relationships and strengthen Dragos services through stakeholder engagement, research and thought leadership, and input on service offerings and delivery models.

Skills

German fluency

English proficiency

Incident response

Job description

Job Description

At Dragos, the mission is personal. The systems we protect deliver the water you drink, power your home, and keep the hospitals your community depends on running. Those critical infrastructure systems that power our civilization around the world are under attack every day by adversaries. When those systems fail, people are immediately at risk. We are the global leader in xOT cybersecurity, combining technology, threat intelligence, and expert services. The people here chose this work because they understand what is at stake . Here, you will find a remote-first mission-driven team across North America, Europe, the Middle East, and APAC built on authenticity, transparency, and trust. If safeguarding the systems that protect your family, friends, and community is the kind of work that matters to you, you are in the right place.

About the Role :

Dragos is hiring an Associate Principal Incident Responder in Germany to lead OT incident response and strengthen customer IR maturity across Europe. You’ll run active investigations and deliver advisory work, including maturity assessments, tabletop exercises, and purple teaming, while improving our IR methodologies and representing Dragos as a thought leader. Ideal for practitioners who are equally strong executing investigations and advising on strategy.

Responsibilities :

• Lead incident response engagements for industrial customers, onsite and remotely, including investigations, threat hunts, triage, and compromise assessments.
• Serve as Incident Commander during active incidents, delivering decision-grade guidance and managing communications throughout the response lifecycle.
• Drive investigations to resolution across industrial environments, from root-cause analysis to containment and remediation strategy, with participation in the on-call rotation.
• Own the post-incident loop by conducting after-action reviews and feeding lessons learned into playbooks and procedures.
• Deliver advisory services such as IR planning workshops, tabletop exercises, and maturity assessments that align response capabilities with business risk.
• Mentor teammates and act as a technical escalation point, while staying accountable for delivery quality, timeliness, and utilization.
• Build customer relationships and strengthen Dragos services through stakeholder engagement, research and thought leadership, and input on service offerings and delivery models.

Qualifications :

• Must be a German resident.
• Fluent in German with a working proficiency in English .
• 8+ years of hands-on incident response and digital forensics experience, with lead-level scope and depth in at least two of network, hardware (controllers/instrumentation), memory, or disk forensics. Methodology mastery matters more than tool specialization.
• Proven ability to lead end-to-end investigations, correlating events across data types to uncover threats, hunt malicious activity, and coordinate communications during incidents.
• Experience in IC