Senior ICS Threat Detection Engineer (Remote-First)

Dragos; Oregon; Híbrido; USD 137.000 - 167.000; Tempo integral

Resumo da vaga

Dragos is seeking a Senior Detection Engineer to join the Detection Engineering team, shaping high-fidelity detections for ICS environments and translating threat intelligence into actionable analytics. You will work with a leading team of ICS cybersecurity practitioners to study emerging threats and develop atomic, component, and composite detections for the Dragos Platform.

You will mentor peers, engage with engineering teams, analyze PCAPs and Windows logs, and contribute to knowledge packs

Qualificações

• 8+ years in security operations, threat hunting, or detection development
• 2+ years of experience operationalizing cyber threat intel
• 1+ years with ICS devices/environments
• Advanced network packet analysis with Wireshark, Tshark, ngrep, tcpdump, Zeek, Scapy
• Windows Event Logging fundamentals and policy tuning
• Experience mentoring junior engineers and presenting technically

Responsabilidades

• Create ICS-focused threat detections and analytics based on tickets
• Mentor Detection Engineers and delegate portions of development
• Collaborate with Principal Detection Engineers on packet captures and logs
• Test, validate, and tune detections for analytic quality control
• Lead triage and response for detection requests with evidence and documentation
• Document processes for analytics in Dragos KP knowledge packs

Conhecimentos

Threat hunting

ICS/SCADA knowledge

Packet analysis

Windows event logs

Mentoring

Adversary emulation

Communication skills

Ferramentas

Suricata

Snort

YARA

Zeek

Python

Go

Descrição da vaga

Dragos is seeking a Senior Detection Engineer to join the Detection Engineering team, shaping high-fidelity detections for ICS environments and translating threat intelligence into actionable analytics. You will work with a leading team of ICS cybersecurity practitioners to study emerging threats and develop atomic, component, and composite detections for the Dragos Platform.

You will mentor peers, engage with engineering teams, analyze PCAPs and Windows logs, and contribute to knowledge packs