Dragos - Senior OT Security Analyst

Remote - MT (Mountain)£60k/year+ Equity3w ago

Remote Senior NA Cybersecurity Security Analyst Close Reporting Python Bash Later

Requirements

• 3–5 years of experience in network security, ideally with hands-on exposure to real-world threat investigation. • Solid understanding of core networking concepts — TCP/IP, firewalls, DNS, packet analysis. • Hands-on experience with security monitoring tools, such as IDS/IPS, SIEM platforms, or network traffic analyzers. • Strong written and verbal communication skills, with close attention to detail — you'll be translating technical findings for both internal teams and customers. • Genuine interest in ICS/OT cybersecurity and a drive to defend critical infrastructure, paired with the ability to pick up complex, industrial-specific concepts quickly and apply them. • Comfortable working independently in a remote environment while coordinating across distributed teams. • Flexibility to participate in shift-based coverage and occasional weekend/on-call work as needed. Note: The initial schedule will be Monday-Friday 8am-5pm, with on-call weekends (MDT for US, CEST for Europe, AEST for AUS). The schedule will later change to a 4 day/week, 10 hour shift model, which includes a day on the weekend. Shift schedules under the 4-day schedule will run Sunday-Wednesday and Wednesday-Saturday. Applicants will have the option to pick from either of the two shift schedules (Sunday-Wednesday or Wednesday-Saturday). • Experience working on a Security Operations Center (SOC) team. • Familiarity with OT protocols (e.g., Modbus, DNP3, Ethernet/IP) and ICS environments. • Applied knowledge of adversary tactics and frameworks relevant to OT (e.g., MITRE ATT&CK for ICS). • Hands-on lab or internship experience in cybersecurity operations, threat hunting, or digital forensics. • Experience in packet capture (PCAP) analysis or basic scripting (e.g., Python, Bash).

Responsibilities

• Lead shift operations, guiding analysts as they triage detection alerts and network telemetry from the Dragos Platform across customer OT environments — stepping in as shift leader for your region when needed. • Serve as a senior investigator, digging into suspicious activity to identify misconfigurations, anomalies, and potential malicious behavior across industrial networks. • Partner across teams — analysts, threat hunters, incident responders, platform engineers, and Detection Engineering — to tune detection logic, reduce false positives, and shape new Dragos Platform detections and playbooks. • Write and deliver incident summaries and operational reports that give internal stakeholders and customers a clear read on what's happening in their environment. • Support the full scope of OT Watch Complete, from asset classification and vulnerability management to hardening recommendations and direct customer information requests. • Build expertise continuously in ICS/OT protocols, adversary tradecraft, and threat intelligence specific to industrial environments.