Senior CTI Analyst — ICS/OT, TS Clearance

Dragos, Inc.; Norfolk (VA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive equity package

Comprehensive benefits plan

Job summary

Dragos, Inc. is seeking a Cyber Threat Intelligence Analyst to support a federal customer onsite in Norfolk, VA.

You will deliver tailored ICS/OT threat intelligence, translate findings into briefings and reports, and work with the customer's Security and Intel teams to turn intelligence into defensive action. The ideal candidate has 5+ years in threat intelligence, TS clearance, and hands-on experience with ICS/OT threats, NetFlow, OSINT, SIEMs, and DFIR.

Qualifications

• Active Top Secret clearance required.
• Onsite work in Norfolk, VA required.
• 5+ years of hands-on threat intelligence experience using multiple resources and disciplines.
• Experience delivering intelligence products for government agencies, federal civilian organizations or critical infrastructure sectors.
• Experience integrating unclassified and classified threat intelligence into cohesive deliverables.
• Threat hunting experience within ICS/OT environments or related technology settings.
• Proven ability to produce operational and strategic intelligence reporting with confidence-based assessments.
• Proficiency with data aggregation, hunting, and analysis tools (e.g., Synapse).
• Experience building threat models for specific threat and risk profiles.

Responsibilities

• Directly support customer with ICS/OT security and cyber threat intelligence needs.
• Perform threat research, analysis, and hunting to respond to client inquiries and craft tailored deliverables.
• Develop expertise in ICS/OT threats relevant to customer environment including attack surface analysis and threat modeling.
• Support customer cybersecurity initiatives including threat hunts, incident response, and exercises.
• Collaborate with internal Threat Intelligence peers to craft content for Dragos Worldview customers.
• Provide feedback to internal Dragos teams such as Incident Response and Professional Services.

Skills

Threat intelligence

Threat hunting

NetFlow

OSINT

SIEMs

DFIR

Threat modeling

Data analysis

ICS/OT threats

Tools

Synapse

Job description

Dragos, Inc. is seeking a Cyber Threat Intelligence Analyst to support a federal customer onsite in Norfolk, VA.

You will deliver tailored ICS/OT threat intelligence, translate findings into briefings and reports, and work with the customer's Security and Intel teams to turn intelligence into defensive action. The ideal candidate has 5+ years in threat intelligence, TS clearance, and hands-on experience with ICS/OT threats, NetFlow, OSINT, SIEMs, and DFIR.