Senior OT Incident Response Lead

Dragos, Inc.; United States; Remote; USD 150,000 - 210,000; Full time

Benefits offered by this job

Competitive Equity Package

Job summary

Dragos, Inc. is seeking an Associate Principal Incident Responder for the Public Sector to lead OT incident response investigations and drive maturity improvements for federal customers.

You will deliver advisory services, conduct workshops, and shape incident readiness. This role blends hands-on investigations with strategic guidance and requires a TS clearance and ability to travel up to 40%.

Qualifications

• 8+ years of hands-on incident response and digital forensics experience.
• Experience in ICS/OT cybersecurity and industrial architectures.
• Strong consulting and advisory experience translating technical depth into strategic customer guidance.
• Willingness to travel up to 40% for on-site engagements.

Responsibilities

• Lead and execute incident response engagements for OT customers as Incident Commander, including triage, investigations, threat hunts, and on-call response.
• Conduct post-incident reviews and root-cause analysis and update playbooks and SOPs.
• Develop and deliver advisory services including incident response planning workshops and maturity assessments.
• Manage customer relationships across onboarding, advisory engagements, and stakeholder communication.
• Contribute to research, threat analysis, and thought leadership that influence Dragos methodology.
• Mentor teammates, provide incident guidance, and serve as escalation point for operational excellence.
• Drive delivery accountability for quality, timeliness, and scalability, and represent Dragos to customers and industry.

Skills

Incident response

Digital forensics

ICS/OT security

Incident command

Customer advisory

Remote work

Travel readiness

Education

Top Secret security clearance

Job description

Dragos, Inc. is seeking an Associate Principal Incident Responder for the Public Sector to lead OT incident response investigations and drive maturity improvements for federal customers.

You will deliver advisory services, conduct workshops, and shape incident readiness. This role blends hands-on investigations with strategic guidance and requires a TS clearance and ability to travel up to 40%.