OT Security Platform Engineer – Dragos

Cognizant Technology Solutions Corporation; Augusta (ME); On-site; USD 160,000 - 185,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays + PTO

401(k) plan

Job summary

Cognizant Technology Solutions Corporation is seeking an experienced OT Security Platform Engineer / Technical Lead to own and operate the Dragos security monitoring platform across a global manufacturing environment. This role combines hands-on platform management with small team leadership and client-facing delivery, focusing on OT security, ICS networking, and threat detection.

The ideal candidate has extensive Dragos/OT monitoring experience, strong networking knowledge, and familiarity with

Qualifications

• 7+ years in OT/ICS Security or related roles.
• Hands-on Dragos or similar OT monitoring in production.
• Strong networking: VLANs, SPAN/TAP, passive monitoring, routing, switching, firewalls.
• Good understanding of ICS/OT environments, Purdue model, zones/conduits.
• Experience triaging OT detections for SOC/IR teams.
• Experience with OT network segmentation, SIEM integration, and detection routing.
• Familiarity with ITSM tools like ServiceNow for incident tracking.
• Experience leading small technical teams in MSP/consulting.
• Experience in regulated manufacturing (life sciences, pharma, medical devices) preferred.
• Certifications: Dragos, GICSP, GRID, GCIA, ISA/IEC 62443, CISSP, CCNA, CCNP preferred.

Responsibilities

• Own day-to-day Dragos Platform operations including sensors and SiteStore.
• Monitor sensors, fix data coverage issues, coordinate with Dragos support.
• Validate sensor placement, SPAN/TAP coverage, passive visibility.
• Triage high-severity findings and escalate to TD&R teams.
• Tune detections to reduce false positives and route OT alerts.
• Support SIEM integration, escalation workflows, and investigations.
• Deploy/validate sensors at new sites; decommission as needed.
• Assist OT network segmentation by analyzing traffic and sensor placement.
• Coordinate managed services resources and act as technical lead.
• Maintain runbooks, transition plans, status reports, and knowledge transfer.

Skills

OT/ICS security

Dragos Platform

ICS networking

Threat detection

Incident response

MSP management

ServiceNow

Education

GICSP

GRID

CISSP

CCNA

CCNP

ISA/IEC 62443

Tools

Dragos Platform

Claroty

Nozomi Networks

Job description

Practice - CIS - Cloud, Infrastructure, and Security Services

About Cloud Infrastructure & Security Services: Cognizant’s Cloud, Infrastructure, and Security Services Practice (CIS), is all about embracing digital transformation by driving core modernization holistically across layers. We help customers transform infrastructure and workplace to meet the rapidly evolving needs of the digital era. Our holistic approach delivers key results for our customers by achieving cloud driven modernization and workplace and operational transformation to run the business in a secure environment.

Job Summary

We are seeking an experienced OT Security Platform Engineer / Technical Lead to own and operate the Dragos security monitoring platform across a global manufacturing environment. This is a hands-on technical leadership role responsible for platform health, sensor management, detection tuning, OT security triage, site onboarding, and network segmentation support. The role will also coordinate day-to-day activities of a small managed services team and provide OT security context to Threat Detection & Response teams. The ideal candidate will combine strong Dragos or equivalent OT monitoring expertise with ICS networking, security operations, and client-facing delivery experience.

In this role, you will:

• Own day-to-day operations of the Dragos Platform, including sensors, SiteStore, OT Watch, platform health, upgrades, configuration consistency, and data quality.
• Monitor and troubleshoot unhealthy or offline sensors, resolve data coverage issues, and coordinate technical issues with Dragos support and network teams.
• Validate sensor placement, SPAN/TAP coverage, and passive network visibility across industrial environments while identifying monitoring gaps.
• Triage high-severity OT security findings, validate affected assets, investigate potential benign activity, and escalate confirmed or suspicious events to the Threat Detection & Response team.
• Tune Dragos detections to improve fidelity, reduce false positives, and ensure critical findings and OT Watch alerts are appropriately routed to enterprise security teams.
• Support SIEM integration, detection forwarding, escalation workflows, and operational handoffs while providing OT-specific context for security investigations.
• Deploy and validate Dragos sensors for new or acquired sites and manage secure decommissioning when facilities are closed or divested.
• Support OT network segmentation initiatives by analyzing traffic patterns, planning sensor placement, and validating monitoring coverage following network changes.
• Coordinate daily activities of managed services resources, manage escalations, and act as the primary technical point of contact for OT Security leadership.
• Maintain operational runbooks, transition plans, escalation matrices, weekly status reports, monthly scorecards, service metrics, and knowledge-transfer documentation.

What you need to have to be considered

• 7+ years of experience in OT/ICS Security, Industrial Cybersecurity, Network Security, Security Operations, or related infrastructure security roles.
• Strong hands-on experience operating Dragos Platform or comparable OT network monitoring solutions such as Claroty or Nozomi Networks in production environments.
• Solid networking knowledge including VLANs, SPAN/TAP, passive monitoring, routing, switching, firewall concepts, traffic flows, and network segmentation.
• Strong understanding of ICS/OT environments, industrial protocols, Purdue Model concepts, zones and conduits, and the availability and safety requirements unique to operational technology.
• Experience triaging OT security detections and providing actionable context to SOC, Threat Detection & Response, or Incident Response teams.
• Experience with OT network segmentation, sensor deployment, coverage validation, SIEM integration, and detection routing is highly desirable.
• Familiarity with ServiceNow or comparable ITSM platforms for incident, request, change, evidence, and operational tracking.
• Experience leading or coordinating a small technical team in an MSP, managed services, or consulting delivery environment.
• Experience within regulated manufacturing environments such as life sciences, pharmaceutical, or medical device organizations is preferred.
• Certifications or training in Dragos, GICSP, GRID, GCIA, ISA/IEC 62443, CISSP, CCNA, or CCNP are preferred.

Applications will be accepted until 16 Nov 2026.

Salary and Other Compensation:

The annual salary for this position is between $[160,000 - 185,000] depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.

Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:

• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contributions
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan

Cognizant is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.