OT Security Platform Engineer – Dragos

Cognizant Technology Solutions Corporation; Topeka (KS); On-site; USD 160,000 - 185,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays plus PTO

401(k) plan and contributions

Long-term/Short-term Disability

Paid Parental Leave

Employee Stock Purchase Plan

Job summary

Cognizant Technology Solutions Corporation is seeking an experienced OT Security Platform Engineer / Technical Lead to own and operate the Dragos security monitoring platform across a global manufacturing environment. This hands-on leader will manage sensors, site onboarding, detection tuning, and coordinate a small managed services team.

The ideal candidate brings Dragos or equivalent OT monitoring experience, strong ICS networking, and security operations skills, with knowledge of Purdue Model

Qualifications

• 7+ years of OT/ICS Security or related roles.
• Hands-on Dragos or comparable OT monitoring experience.
• Strong networking including VLANs, SPAN/TAP, and segmentation.
• Solid ICS/OT environment knowledge and Purdue Model concepts.
• Experience triaging OT detections and coordinating with SOC/IRT.
• Experience with OT network segmentation and SIEM integration is highly desirable.
• Familiarity with ITSM platforms (e.g., ServiceNow) for incident tracking.
• Experience leading a small technical team in MSP/consulting.
• Prefers experience in regulated manufacturing sectors.

Responsibilities

• Own day-to-day Dragos Platform operations: sensors, SiteStore, OT Watch, health, upgrades.
• Triage high-severity OT findings and escalate to Threat Detection & Response.
• Tune detections to reduce false positives and route critical alerts appropriately.
• Support SIEM integration, detection forwarding, and operational handoffs.
• Deploy sensors for new sites and manage secure decommissioning.
• Coordinate managed services resources and act as technical POC for OT leadership.
• Maintain runbooks, transition plans, and weekly/monthly performance reports.

Skills

OT security

Dragos platform

ICS networking

Threat detection

Incident response

MSP delivery

ITSM (ServiceNow)

Tools

Claroty

Nozomi Networks

Job description

Practice - CIS - Cloud, Infrastructure, and Security Services

About Cloud Infrastructure & Security Services: Cognizant’s Cloud, Infrastructure, and Security Services Practice (CIS), is all about embracing digital transformation by driving core modernization holistically across layers. We help customers transform infrastructure and workplace to meet the rapidly evolving needs of the digital era. Our holistic approach delivers key results for our customers by achieving cloud driven modernization and workplace and operational transformation to run the business in a secure environment.

Job Summary

We are seeking an experienced OT Security Platform Engineer / Technical Lead to own and operate the Dragos security monitoring platform across a global manufacturing environment. This is a hands-on technical leadership role responsible for platform health, sensor management, detection tuning, OT security triage, site onboarding, and network segmentation support. The role will also coordinate day-to-day activities of a small managed services team and provide OT security context to Threat Detection & Response teams. The ideal candidate will combine strong Dragos or equivalent OT monitoring expertise with ICS networking, security operations, and client-facing delivery experience.

In this role, you will:

• Own day-to-day operations of the Dragos Platform, including sensors, SiteStore, OT Watch, platform health, upgrades, configuration consistency, and data quality.
• Monitor and troubleshoot unhealthy or offline sensors, resolve data coverage issues, and coordinate technical issues with Dragos support and network teams.
• Validate sensor placement, SPAN/TAP coverage, and passive network visibility across industrial environments while identifying monitoring gaps.
• Triage high-severity OT security findings, validate affected assets, investigate potential benign activity, and escalate confirmed or suspicious events to the Threat Detection & Response team.
• Tune Dragos detections to improve fidelity, reduce false positives, and ensure critical findings and OT Watch alerts are appropriately routed to enterprise security teams.
• Support SIEM integration, detection forwarding, escalation workflows, and operational handoffs while providing OT-specific context for security investigations.
• Deploy and validate Dragos sensors for new or acquired sites and manage secure decommissioning when facilities are closed or divested.
• Support OT network segmentation initiatives by analyzing traffic patterns, planning sensor placement, and validating monitoring coverage following network changes.
• Coordinate daily activities of managed services resources, manage escalations, and act as the primary technical point of contact for OT Security leadership.
• Maintain operational runbooks, transition plans, escalation matrices, weekly status reports, monthly scorecards, service metrics, and knowledge-transfer documentation.

What you need to have to be considered

• 7+ years of experience in OT/ICS Security, Industrial Cybersecurity, Network Security, Security Operations, or related infrastructure security roles.
• Strong hands-on experience operating Dragos Platform or comparable OT network monitoring solutions such as Claroty or Nozomi Networks in production environments.
• Solid networking knowledge including VLANs, SPAN/TAP, passive monitoring, routing, switching, firewall concepts, traffic flows, and network segmentation.
• Strong understanding of ICS/OT environments, industrial protocols, Purdue Model concepts, zones and conduits, and the availability and safety requirements unique to operational technology.
• Experience triaging OT security detections and providing actionable context to SOC, Threat Detection & Response, or Incident Response teams.
• Experience with OT network segmentation, sensor deployment, coverage validation, SIEM integration, and detection routing is highly desirable.
• Familiarity with ServiceNow or comparable ITSM platforms for incident, request, change, evidence, and operational tracking.
• Experience leading or coordinating a small technical team in an MSP, managed services, or consulting delivery environment.
• Experience within regulated manufacturing environments such as life sciences, pharmaceutical, or medical device organizations is preferred.
• Certifications or training in Dragos, GICSP, GRID, GCIA, ISA/IEC 62443, CISSP, CCNA, or CCNP are preferred.

Applications will be accepted until 16 Nov 2026.

Salary and Other Compensation:

The annual salary for this position is between $[160,000 - 185,000] depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.

Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:

• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contributions
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan

Cognizant is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.