Associate Principal Incident Responder – Public Sector

Posted 46mins ago

Employment Information

Industry
Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

OT incident responder leading federal customer investigations for Dragos, a global xOT cybersecurity company. Delivering incident response, maturity assessments, and advisory services.

Responsibilities:

  • Lead and execute OT incident response engagements as Incident Commander, including triage, investigations, threat hunts, compromise assessments, and on-call response across onsite and remote environments
  • Conduct post-incident reviews and root-cause analysis; integrate lessons learned into playbooks, standard operating procedures, and response methodologies
  • Develop and deliver incident response planning workshops, maturity assessments, playbook design, and tabletop exercises
  • Manage customer relationships across onboarding, strategic advisory engagements, and stakeholder communication
  • Contribute to research, threat analysis, whitepapers, webinars, presentations, Dragos methodology, and training
  • Mentor and develop teammates through hands-on training and incident guidance; serve as a technical escalation point
  • Drive delivery accountability for quality, timeliness, and utilization; partner with internal teams on service expansion and scalability improvements
  • Represent Dragos’s mission to customers and the industry

Requirements:

  • U.S. citizenship and an active Top Secret (TS) security clearance
  • 8+ years of hands-on incident response and digital forensics experience with proficiency in at least two forensics domains (network, hardware, memory, disk)
  • Proven experience in ICS/OT cybersecurity including knowledge of industrial architecture, threat landscapes, vulnerabilities, and applicable frameworks and standards
  • Proven ability to lead end-to-end investigations, correlate events across multiple data types, and uncover threats through methodical analysis and pivoting
  • Proven incident management and communication ability, including coordinating during incidents, guiding customers through high-pressure situations, and authoring customer-facing documentation, playbooks, and executive briefings
  • Consulting and advisory experience translating technical depth into strategic customer guidance, incident response planning, and recommendations for advancing incident readiness and response maturity
  • Ability to work independently and remotely while coordinating effectively across distributed teams
  • Willingness to travel up to 40% for on-site engagements and active case requirements
  • Ability to pass a background check as a condition of employment

Benefits:

  • Competitive Equity Package
  • Comprehensive Benefits Plan