OT Security Platform Engineer – Dragos

Cognizant Technology Solutions Corporation; Dover (DE); On-site; USD 160,000 - 185,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays plus Paid Time Off

401(k) plan and contributions

Long-term/Short-term Disability

Paid Parental Leave

Employee Stock Purchase Plan

Job summary

Cognizant Technology Solutions Corporation seeks an experienced OT Security Platform Engineer / Technical Lead to own and operate the Dragos security monitoring platform across a global manufacturing environment. You will lead a small managed services team, ensure platform health, sensor management, and detection tuning, while providing OT security context to Threat Detection & Response teams.

Strong Dragos or equivalent OT monitoring experience with ICS networking is essential.

Qualifications

• 7+ years in OT/ICS Security or related roles.
• Hands-on Dragos Platform or comparable OT monitoring experience in production.
• Solid networking knowledge: VLANs, SPAN/TAP, routing, switching, and segmentation.
• Strong understanding of ICS/OT environments and Purdue Model concepts.
• Experience triaging OT detections and providing context to SOC/IR teams.
• Familiarity with ITSM tools like ServiceNow and MSP delivery.
• Experience leading a small technical team in a managed services environment.
• Prefers experience in regulated manufacturing sectors (life sciences, pharma, medical devices).
• Certifications or training in Dragos, GICSP, GRID, GCIA, ISA/IEC 62443, CISSP, CCNA/CCNP preferred.

Responsibilities

• Own day-to-day operations of the Dragos Platform across sites, sensors, and SiteStore.
• Monitor and troubleshoot sensors, ensure data coverage and quality.
• Validate sensor placement and network visibility across environments.
• Triage high-severity OT findings and escalate to Threat Detection & Response.
• Tune detections to reduce false positives and route critical alerts to security teams.
• Support SIEM integration and detection forwarding; provide OT context for investigations.
• Deploy/validate sensors for new sites; manage secure decommissioning.
• Coordinate MSP resources and act as primary technical point of contact for OT security leadership.
• Maintain runbooks, transition plans, and weekly/monthly security reports.

Skills

OT/ICS Security

Security Operations

Threat Detection & Response

Incident Response

Networking & Segmentation

Dragos Platform

MSP/Managed Services

Education

CISSP / other certifications

GICSP / GRID / GCIA / ISA/IEC 62443

CCNA / CCNP

Tools

Dragos

Claroty

Nozomi Networks

Job description

Practice - CIS - Cloud, Infrastructure, and Security Services

About Cloud Infrastructure & Security Services: Cognizant’s Cloud, Infrastructure, and Security Services Practice (CIS), is all about embracing digital transformation by driving core modernization holistically across layers. We help customers transform infrastructure and workplace to meet the rapidly evolving needs of the digital era. Our holistic approach delivers key results for our customers by achieving cloud driven modernization and workplace and operational transformation to run the business in a secure environment.

Job Summary

We are seeking an experienced OT Security Platform Engineer / Technical Lead to own and operate the Dragos security monitoring platform across a global manufacturing environment. This is a hands-on technical leadership role responsible for platform health, sensor management, detection tuning, OT security triage, site onboarding, and network segmentation support. The role will also coordinate day-to-day activities of a small managed services team and provide OT security context to Threat Detection & Response teams. The ideal candidate will combine strong Dragos or equivalent OT monitoring expertise with ICS networking, security operations, and client-facing delivery experience.

In this role, you will:

• Own day-to-day operations of the Dragos Platform, including sensors, SiteStore, OT Watch, platform health, upgrades, configuration consistency, and data quality.
• Monitor and troubleshoot unhealthy or offline sensors, resolve data coverage issues, and coordinate technical issues with Dragos support and network teams.
• Validate sensor placement, SPAN/TAP coverage, and passive network visibility across industrial environments while identifying monitoring gaps.
• Triage high-severity OT security findings, validate affected assets, investigate potential benign activity, and escalate confirmed or suspicious events to the Threat Detection & Response team.
• Tune Dragos detections to improve fidelity, reduce false positives, and ensure critical findings and OT Watch alerts are appropriately routed to enterprise security teams.
• Support SIEM integration, detection forwarding, escalation workflows, and operational handoffs while providing OT-specific context for security investigations.
• Deploy and validate Dragos sensors for new or acquired sites and manage secure decommissioning when facilities are closed or divested.
• Support OT network segmentation initiatives by analyzing traffic patterns, planning sensor placement, and validating monitoring coverage following network changes.
• Coordinate daily activities of managed services resources, manage escalations, and act as the primary technical point of contact for OT Security leadership.
• Maintain operational runbooks, transition plans, escalation matrices, weekly status reports, monthly scorecards, service metrics, and knowledge-transfer documentation.

What you need to have to be considered

• 7+ years of experience in OT/ICS Security, Industrial Cybersecurity, Network Security, Security Operations, or related infrastructure security roles.
• Strong hands-on experience operating Dragos Platform or comparable OT network monitoring solutions such as Claroty or Nozomi Networks in production environments.
• Solid networking knowledge including VLANs, SPAN/TAP, passive monitoring, routing, switching, firewall concepts, traffic flows, and network segmentation.
• Strong understanding of ICS/OT environments, industrial protocols, Purdue Model concepts, zones and conduits, and the availability and safety requirements unique to operational technology.
• Experience triaging OT security detections and providing actionable context to SOC, Threat Detection & Response, or Incident Response teams.
• Experience with OT network segmentation, sensor deployment, coverage validation, SIEM integration, and detection routing is highly desirable.
• Familiarity with ServiceNow or comparable ITSM platforms for incident, request, change, evidence, and operational tracking.
• Experience leading or coordinating a small technical team in an MSP, managed services, or consulting delivery environment.
• Experience within regulated manufacturing environments such as life sciences, pharmaceutical, or medical device organizations is preferred.
• Certifications or training in Dragos, GICSP, GRID, GCIA, ISA/IEC 62443, CISSP, CCNA, or CCNP are preferred.

Applications will be accepted until 16 Nov 2026.

Salary and Other Compensation:

The annual salary for this position is between $[160,000 - 185,000] depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.

Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:

• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contributions
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan

Cognizant is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.