Senior ICS Threat Detection Engineer

Dragos, Inc.; Lennox Park (MD); On-site; USD 129,000 - 175,000; Full time

Job summary

Dragos, Inc. is a global leader in ICS/OT cybersecurity seeking a Senior Detection Engineer to join our Detection Engineering team. You will create high-fidelity detections to help customers identify threats targeting OT environments and translate threat intelligence into practical analytics.

This role emphasizes mentoring, collaboration with engineers, and ongoing learning across Windows/Linux, PCAPs, and IDS rules. Join a remote-first team across North America.

Qualifications

• 8+ years in security operations, threat hunting, or detection development.
• 2+ years of experience operationalizing cyber threat intelligence.
• 1+ year of experience with SCADA/ICS environments.
• Advanced packet analysis using Wireshark, Tshark, tcpdump, Zeek, Scapy.
• Working knowledge of Windows Event Logging and auditing.
• Ability to mentor junior detection engineers.

Responsibilities

• Create IC-focused detections (atomic, component, composite, events) and Asset Identification analytics.
• Mentor Detection Engineers and delegate portions of development.
• Engage with Principal Detection Engineers on analysis of PCAPs and Windows logs.
• Test, validate, and tune detections for analytic quality control.
• Lead the review, triage, and response for detection requests with PCAPs, links, tags, and docs.
• Drive documentation of processes for knowledge packs and maintain the knowledgebase.
• Analyze artifacts from IC equipment, embedded devices, firewalls, and network devices.
• Analyze threat intelligence reporting to create detection ideation tasks.
• Partner with Engineering, OT Watch, and QA teams to identify protocol coverage gaps.
• Provide and receive peer feedback on a regular cadence.

Skills

Security operations

Threat hunting

Detection development

SCADA/ICS knowledge

Packet analysis

Windows Event Logging

Mentoring junior engineers

Python

Tools

Wireshark

Tshark

tcpdump

Zeek

Scapy

Suricata

Snort

YARA

Job description

Dragos, Inc. is a global leader in ICS/OT cybersecurity seeking a Senior Detection Engineer to join our Detection Engineering team. You will create high-fidelity detections to help customers identify threats targeting OT environments and translate threat intelligence into practical analytics.

This role emphasizes mentoring, collaboration with engineers, and ongoing learning across Windows/Linux, PCAPs, and IDS rules. Join a remote-first team across North America.