Senior OT Threat Hunter — Remote-First ICS/OT Security

Dragos, Inc.; United States; On-site; USD 126,000 - 154,000; Full time

Benefits offered by this job

Equity package

Benefits plan

Job summary

Dragos is seeking a Senior OT Threat Hunter to join the OT Watch team. You will lead hands-on threat hunts across industrial ICS/OT networks, collaborating with Intelligence, Services and Engineering to uncover adversaries and improve detection capabilities.

You will act as the escalation point for high-severity alerts, mentor junior analysts, and deliver clear guidance to customers during security events, while optimizing the Dragos Platform for each client environment.

Qualifications

• Demonstrated experience in hypothesis-based threat hunting.
• Experience analyzing network telemetry and identifying behavioral deviations/anomalies.
• Strong understanding of networking concepts (TCP/IP, firewalls, DNS, packet analysis).
• Experience with PCAP analysis, IDS/IPS, SIEM platforms in OT context.
• Familiarity with MITRE ATT&CK for ICs.
• Threat intelligence workflows exposure and feedback loops.

Responsibilities

• Lead hands-on, hypothesis-driven threat hunts across industrial (ICS/OT) networks.
• Act as top escalation point for high-severity alerts and communicate with clients on findings and remediation steps.
• Configure and optimize the Dragos Platform and hunt profiles for customer environments.
• Develop new hunting hypotheses and content; provide feedback to Detection Engineering and Intelligence teams.
• Dig into suspicious network activity and contribute to incident summaries and reports.
• Create scripts and tooling to accelerate hunting; mentor junior team members on OT protocols and threat intel.

Skills

Threat hunting

Network telemetry analysis

TCP/IP networking

PCAP analysis

IDS/IPS/SIEM

Threat intelligence

Communication

Mentoring

Tools

Dragos Platform

PCAP tools

IDS/IPS tools

Job description

Dragos is seeking a Senior OT Threat Hunter to join the OT Watch team. You will lead hands-on threat hunts across industrial ICS/OT networks, collaborating with Intelligence, Services and Engineering to uncover adversaries and improve detection capabilities.

You will act as the escalation point for high-severity alerts, mentor junior analysts, and deliver clear guidance to customers during security events, while optimizing the Dragos Platform for each client environment.