Remote Senior OT Threat Hunter - ICS/OT Security Lead

Dragos, Inc.; Lennox Park (MD); On-site; USD 126,000 - 154,000; Full time

Benefits offered by this job

Equity package

Benefits package

Job summary

Dragos, Inc. is seeking a Senior OT Threat Hunter to independently lead hunting operations across industrial OT/ICS networks using the Dragos Platform.

You will serve as an escalation point for high-severity alerts and collaborate with Intelligence, Services and Engineering to elevate detection capabilities. You will also mentor junior team members, develop new hunting content, and deliver actionable guidance to customers during critical security events.

Qualifications

• Experience in hypothesis-based threat hunting.
• Experience analyzing network telemetry and identifying behavioral deviations.
• Strong understanding of networking concepts (TCP/IP, firewalls, DNS).
• Experience with OT/ICS-focused tooling (PCAP, SIEM).
• Familiarity with MITRE ATT&CK for ICs and threat intelligence workflows.
• Able to communicate complex findings to clients and stakeholders.
• Experience as escalation point or senior contributor.

Responsibilities

• Lead hands-on, hypothesis-driven threat hunts across industrial networks in collaboration with cross-functional teams.
• Act as top escalation point for high-severity alerts and communicate with clients.
• Configure and optimize Dragos Platform and hunt profiles for client environments.
• Develop new hunting hypotheses and contribute feedback to Detection Engineering and Intelligence teams.
• Analyze suspicious activity and produce clear incident summaries and reports for varied audiences.
• Create scripts and tooling to speed up hunting and mentor junior staff.

Skills

Threat hunting

Networking concepts

OT/ICS security

MITRE ATT&CK for ICs

Threat intelligence workflows

Communication

Escalation point

Senior contributor

Tools

PCAP analysis

IDS/IPS

SIEM

OT network analysis

Job description

Dragos, Inc. is seeking a Senior OT Threat Hunter to independently lead hunting operations across industrial OT/ICS networks using the Dragos Platform.

You will serve as an escalation point for high-severity alerts and collaborate with Intelligence, Services and Engineering to elevate detection capabilities. You will also mentor junior team members, develop new hunting content, and deliver actionable guidance to customers during critical security events.