Senior ICS/OT Cyber Threat Intelligence Analyst

Dragos is on a relentless mission to defend industrial organizations that provide us with the necessities of modern civilization: running water, functioning electricity, and safe industrial working environments. As the market leader in ICS/OT Cybersecurity, we are dedicated to arming our customers with best-in-class technology, threat intelligence, and services to protect their systems as effectively and efficiently as possible. We're a remote-first culture with operations in North America, Europe, the Middle East, and APAC. We're looking for mission-oriented teammates who embody our core values of authenticity, transparency and trust. Are you ready to make a difference? Come join a mission that can save the world!

About the role:

In this position, you will be a key player on a world-class, customer-facing Threat Intelligence team. Specifically, you will be the dedicated CTI resource for Dragos customers by providing tailored threat intelligence products that are relevant to customer requirements; thereby guiding their OT security journey. In addition, you will work across delivery teams to maximize the intelligence value provided and derived from those engagements. This is your chance to make a significant impact in an exciting and evolving industrial security field!

Location: USA (Remote)

• Directly support clients with their respective ICS/OT security and cyber threat intelligence needs.
• Immersion into your respective client's daily ICS/OT security operations.
• Hunt within your respective client's ICS/OT environment looking for potential adversary activity and support the client in responding to and mitigating discovered threats and risks.
• Leverage internal Dragos sources, OSINT, and our paid CTI sources to draft recurring deliverables tailored to your respective client's priority intelligence requirements.
• Respond to client's ICS/OT CTI inquiries through Deep Analysis research deliverables and weekly engagements.
• Consume ICS/OT cyber threat intelligence and other relevant internal data on behalf of your respective client. Provide alerts and advisory deliverables when applicable.
• Help drive client adoption and utilization of Dragos products and services and help them along their customer optimization journey.
• Build and maintain a working knowledge and understanding of ICS/OT threats and risks directly relevant to your respective client's OT environment, including attack surface analysis, threat hunting strategies and threat modeling.
• Provide support and feedback to other internal Dragos teams, such as Customer Success and the broader Dragos Intelligence apparatus.
• Drive adoption and maintenance of your respective client's ICS/OT priority intelligence requirements and ensure those are hunted against regularly.

• At least four (4) years in a CTI Hunting & Analysis capacity focused on threat hunting, research, and analysis using multiple tools and sources such as netflow, endpoint, Open-Source
• Intelligence (OSINT), and Incident Response and Forensics data.
• At least two (2) years in a customer-facing environment (e.g., consultant or a managed service provider).
• At least two (2) years of experience with ICS/OT environments, including an understanding of relevant technologies, topology and protocols and how adversaries target and exploit them.
• Experience with NERC-CIP compliance.
• Experience with writing CTI analysis products and deliverables using confidence-based assessments.
• Knowledge of ICS adversary TTPs, historical attacks and the overall impact of those events.
• The ability to confidently scope, shape and deliver CTI content with minimal oversight.
• Knowledge of cybersecurity and network defender frameworks such as Mitre ATT&CK and DEFEND.
• Experience with data aggregation, hunting, and analysis tools such as Synapse.

• Salary: $170,000
• Competitive Equity Package
• Comprehensive Benefits Plan

Dragos is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, state, or local laws. All new hires must pass a background check as a condition of employment.

#LI-JF1 #LI-REMOTE