Remote OT Security Lead — Industrial Cyber Defense

Dragos; United States; Remote; USD 105,000 - 120,000; Full time

Benefits offered by this job

Competitive Equity Package

Comprehensive Benefits Plan

Job summary

Dragos is seeking a Senior OT Security Analyst to lead frontline monitoring and triage for customer OT environments. You will mentor junior analysts, investigate suspicious activity, and support threat hunters with high‑quality escalations on the Dragos Platform.

The role emphasizes industrial security, OT protocols, and collaboration with detection engineering, platform engineers, and incident responders. Remote-first, with regional shift coverage across North America, Europe, MEA, and APAC.

Qualifications

• 3–5 years of experience in network security or threat investigation.
• Strong understanding of TCP/IP, firewalls, DNS, and packet analysis.
• Experience with security monitoring tools (IDS/IPS, SIEM) and network tooling.

Responsibilities

• Lead shift operations, triaging detection alerts and telemetry across OT environments.
• Investigate anomalous activity, identify misconfigurations and potential threats.
• Escalate findings with clear documentation to incident responders and threat hunters.
• Tune detection logic and playbooks across the Dragos Platform with cross-team partners.
• Produce incident summaries and operational reports for stakeholders.
• Support asset classification, vulnerability management, and hardening recommendations.
• Build expertise in IC-OT protocols and threat intel for industrial environments.

Skills

Threat detection

Networking fundamentals

Security monitoring

Communication

IC-OT cybersecurity

Tools

IDS/IPS

SIEM

PCAP analysis

Scripting (Python)

Job description

Dragos is seeking a Senior OT Security Analyst to lead frontline monitoring and triage for customer OT environments. You will mentor junior analysts, investigate suspicious activity, and support threat hunters with high‑quality escalations on the Dragos Platform.

The role emphasizes industrial security, OT protocols, and collaboration with detection engineering, platform engineers, and incident responders. Remote-first, with regional shift coverage across North America, Europe, MEA, and APAC.