OT Security Platform Engineer – Dragos

Cognizant Technology Solutions Corporation; Lincoln (NE); On-site; USD 160,000 - 185,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays plus Paid Time Off

401(k) plan and contributions

Long-term/Short-term Disability

Paid Parental Leave

Employee Stock Purchase Plan

Job summary

Cognizant Technology Solutions Corporation is seeking an experienced OT Security Platform Engineer / Technical Lead to own and operate the Dragos security monitoring platform across a global manufacturing environment.

This hands-on leadership role covers platform health, sensor management, and OT security triage, with coordination of a small managed services team and OT security context for Threat Detection & Response.

Qualifications

• 7+ years of experience in OT/ICS Security, Industrial Cybersecurity, Network Security, Security Operations, or related infrastructure security roles.
• Hands-on experience operating Dragos Platform or comparable OT network monitoring solutions in production environments.
• Strong networking knowledge including VLANs, SPAN/TAP, passive monitoring, routing, switching, firewall concepts, traffic flows, and network segmentation.
• Understanding of ICS/OT environments, industrial protocols, Purdue Model concepts, zones and conduits, and the availability and safety requirements of OT.
• Experience triaging OT security detections and providing actionable context to SOC, Threat Detection & Response, or Incident Response teams.
• Experience with OT network segmentation, sensor deployment, coverage validation, SIEM integration, and detection routing is highly desirable.
• Familiarity with ServiceNow or comparable ITSM platforms for incident, request, change, evidence, and operational tracking.
• Experience leading or coordinating a small technical team in an MSP, managed services, or consulting delivery environment.
• Experience in regulated manufacturing environments (life sciences, pharmaceutical, medical devices) is preferred.
• Certifications or training in Dragos, GICSP, GRID, GCIA, ISA/IEC 62443, CISSP, CCNA, or CCNP are preferred.

Responsibilities

• Own day-to-day operations of the Dragos Platform, including sensors, SiteStore, OT Watch, platform health, upgrades, configuration consistency, and data quality.
• Monitor and troubleshoot unhealthy or offline sensors, resolve data coverage issues, and coordinate technical issues with Dragos support and network teams.
• Validate sensor placement, SPAN/TAP coverage, and passive network visibility across industrial environments while identifying monitoring gaps.
• Triage high-severity OT security findings, validate affected assets, investigate potential benign activity, and escalate confirmed or suspicious events to Threat Detection & Response.
• Tune Dragos detections to improve fidelity, reduce false positives, and ensure critical findings and OT Watch alerts are appropriately routed to enterprise security teams.
• Support SIEM integration, detection forwarding, escalation workflows, and operational handoffs while providing OT-specific context for security investigations.
• Deploy and validate Dragos sensors for new or acquired sites and manage secure decommissioning when facilities are closed or divested.
• Support OT network segmentation initiatives by analyzing traffic patterns, planning sensor placement, and validating monitoring coverage after network changes.
• Coordinate daily activities of managed services resources, manage escalations, and act as the primary technical point of contact for OT Security leadership.
• Maintain operational runbooks, transition plans, escalation matrices, weekly status reports, monthly scorecards, service metrics, and knowledge-transfer documentation.

Skills

OT/ICS Security

Dragos Platform experience

Industrial networking

ICS/OT environments

Threat Detection & Response context

SIEM integration

ITSM (ServiceNow)

Team leadership (MSP/managed services)

Regulated manufacturing environments

Industrial cybersecurity

Security operations

Networking concepts (VLANs, SPAN/TAP)

Industrial protocols; Purdue Model

Security monitoring tuning

Tools

Dragos Platform

Claroty

Nozomi Networks

ServiceNow

Job description

Practice - CIS - Cloud, Infrastructure, and Security Services

About Cloud Infrastructure & Security Services: Cognizant’s Cloud, Infrastructure, and Security Services Practice (CIS), is all about embracing digital transformation by driving core modernization holistically across layers. We help customers transform infrastructure and workplace to meet the rapidly evolving needs of the digital era. Our holistic approach delivers key results for our customers by achieving cloud driven modernization and workplace and operational transformation to run the business in a secure environment.

Job Summary

We are seeking an experienced OT Security Platform Engineer / Technical Lead to own and operate the Dragos security monitoring platform across a global manufacturing environment. This is a hands-on technical leadership role responsible for platform health, sensor management, detection tuning, OT security triage, site onboarding, and network segmentation support. The role will also coordinate day-to-day activities of a small managed services team and provide OT security context to Threat Detection & Response teams. The ideal candidate will combine strong Dragos or equivalent OT monitoring expertise with ICS networking, security operations, and client-facing delivery experience.

In this role, you will:

• Own day-to-day operations of the Dragos Platform, including sensors, SiteStore, OT Watch, platform health, upgrades, configuration consistency, and data quality.
• Monitor and troubleshoot unhealthy or offline sensors, resolve data coverage issues, and coordinate technical issues with Dragos support and network teams.
• Validate sensor placement, SPAN/TAP coverage, and passive network visibility across industrial environments while identifying monitoring gaps.
• Triage high-severity OT security findings, validate affected assets, investigate potential benign activity, and escalate confirmed or suspicious events to the Threat Detection & Response team.
• Tune Dragos detections to improve fidelity, reduce false positives, and ensure critical findings and OT Watch alerts are appropriately routed to enterprise security teams.
• Support SIEM integration, detection forwarding, escalation workflows, and operational handoffs while providing OT-specific context for security investigations.
• Deploy and validate Dragos sensors for new or acquired sites and manage secure decommissioning when facilities are closed or divested.
• Support OT network segmentation initiatives by analyzing traffic patterns, planning sensor placement, and validating monitoring coverage following network changes.
• Coordinate daily activities of managed services resources, manage escalations, and act as the primary technical point of contact for OT Security leadership.
• Maintain operational runbooks, transition plans, escalation matrices, weekly status reports, monthly scorecards, service metrics, and knowledge-transfer documentation.

What you need to have to be considered

• 7+ years of experience in OT/ICS Security, Industrial Cybersecurity, Network Security, Security Operations, or related infrastructure security roles.
• Strong hands-on experience operating Dragos Platform or comparable OT network monitoring solutions such as Claroty or Nozomi Networks in production environments.
• Solid networking knowledge including VLANs, SPAN/TAP, passive monitoring, routing, switching, firewall concepts, traffic flows, and network segmentation.
• Strong understanding of ICS/OT environments, industrial protocols, Purdue Model concepts, zones and conduits, and the availability and safety requirements unique to operational technology.
• Experience triaging OT security detections and providing actionable context to SOC, Threat Detection & Response, or Incident Response teams.
• Experience with OT network segmentation, sensor deployment, coverage validation, SIEM integration, and detection routing is highly desirable.
• Familiarity with ServiceNow or comparable ITSM platforms for incident, request, change, evidence, and operational tracking.
• Experience leading or coordinating a small technical team in an MSP, managed services, or consulting delivery environment.
• Experience within regulated manufacturing environments such as life sciences, pharmaceutical, or medical device organizations is preferred.
• Certifications or training in Dragos, GICSP, GRID, GCIA, ISA/IEC 62443, CISSP, CCNA, or CCNP are preferred.

Applications will be accepted until 16 Nov 2026.

Salary and Other Compensation:

The annual salary for this position is between $[160,000 - 185,000] depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.

Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:

• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contributions
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan

Cognizant is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.