2 months ago
Remote, United StatesSenior
Base Salary
$152k - $152k/yr
Responsibilities
- Create ICS-focused threat detections and Asset Identification analytics for the Dragos Platform.
- Mentor Detection Engineers and support Principal Detection Engineers through detection development and analysis of packet captures and Windows host logs.
- Test, validate, and tune detections for analytic quality control.
- Lead review, triage, and response for detection requests, enriching tickets with PCAPs, links, tags, and documentation.
- Document processes for authoring, validating, and testing analytics and maintain the knowledgebase.
- Analyze artifacts from ICS equipment, embedded devices, firewalls, network devices, and ICS software.
- Analyze cyber threat intelligence to create detection ideation tasks and partner with Engineering, OT Watch, and Quality Engineering to resolve platform issues.
Requirements
- 8+ years in security operations, threat hunting, detection development, offensive operations, threat emulation, or security tool development.
- 2+ years operationalizing cyber threat intelligence to defend networks from emerging threats.
- 1+ year of direct experience with SCADA, DCS, building automation, or other industrial control system devices and environments.
- Advanced network packet analysis and manipulation experience using tools such as Wireshark, Tshark, ngrep, tcpdump, Zeek, and Scapy.
- Working knowledge of Windows Event Logging, operating system internals, network communication fundamentals, and large host and network datasets.
- Ability to mentor and develop junior detection engineers and communicate through verbal presentations and technical writing.
- Preferred experience with Suricata, Snort, YARA, Zeek, Python, Rust, Ruby, Go, Lua, Splunk, Elasticsearch, ICS assessments or penetration testing, system administration, networking, firewalls, virtualization, and relevant cybersecurity certifications.
- Ability to travel less than 10% for team activities, conferences, and customer sites.
Benefits
- Salary of $152,000.
- Competitive equity package.
- Comprehensive benefits plan.
- Remote-first work arrangement across North America, Europe, the Middle East, and APAC.
- Travel is less than 10% when required.
- Employment is contingent on passing a background check.
About Dragos
Dragos builds OT/ICS cybersecurity software and services for operators of industrial and critical infrastructure. The Dragos Platform provides asset visibility, vulnerability management, and threat detection across OT, IT, IoT, and IIoT, complemented by OT threat intelligence and incident response services. Founded in 2016 and headquartered in Hanover, Maryland, it serves sectors including electric power, oil and gas, manufacturing, water, transportation, mining, and government.