Associate Principal Incident Responder

About the Role:

• Our Professional Services team is hiring an Associate Principal Incident Responder to lead OT incident response investigations and advance customer OT IR maturity.
• This is primarily an incident response role with a strong consulting component: you will lead active response engagements and deliver advisory work.
• You will be responsible for supporting improvements to the Dragos IR methodology and representing Dragos as a thought leader.

Responsibilities:

• Lead and execute incident response engagements for OT customers as Incident Commander, including triage, investigations, threat hunts, compromise assessments, and on-call response.
• Conduct post-incident reviews, root-cause analysis, and integrate lessons learned into playbooks, standard operating procedures, and response methodologies.
• Develop and deliver advisory services including incident response planning workshops, maturity assessments, playbook design, and tabletop exercises.

Qualifications:

• 8+ years of hands-on incident response and digital forensics experience with proficiency in at least two forensics domains.
• Proven experience in ICS/OT cybersecurity including knowledge of industrial architecture, threat landscapes, vulnerabilities, and frameworks.
• Proven ability to lead end-to-end investigations and manage incident coordination calmly and confidently during high-pressure situations.