Associate Principal Incident Responder – Public Sector
Posted 46mins ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
OT incident responder leading federal customer investigations for Dragos, a global xOT cybersecurity company. Delivering incident response, maturity assessments, and advisory services.
Responsibilities:
- Lead and execute OT incident response engagements as Incident Commander, including triage, investigations, threat hunts, compromise assessments, and on-call response across onsite and remote environments
- Conduct post-incident reviews and root-cause analysis; integrate lessons learned into playbooks, standard operating procedures, and response methodologies
- Develop and deliver incident response planning workshops, maturity assessments, playbook design, and tabletop exercises
- Manage customer relationships across onboarding, strategic advisory engagements, and stakeholder communication
- Contribute to research, threat analysis, whitepapers, webinars, presentations, Dragos methodology, and training
- Mentor and develop teammates through hands-on training and incident guidance; serve as a technical escalation point
- Drive delivery accountability for quality, timeliness, and utilization; partner with internal teams on service expansion and scalability improvements
- Represent Dragos’s mission to customers and the industry
Requirements:
- U.S. citizenship and an active Top Secret (TS) security clearance
- 8+ years of hands-on incident response and digital forensics experience with proficiency in at least two forensics domains (network, hardware, memory, disk)
- Proven experience in ICS/OT cybersecurity including knowledge of industrial architecture, threat landscapes, vulnerabilities, and applicable frameworks and standards
- Proven ability to lead end-to-end investigations, correlate events across multiple data types, and uncover threats through methodical analysis and pivoting
- Proven incident management and communication ability, including coordinating during incidents, guiding customers through high-pressure situations, and authoring customer-facing documentation, playbooks, and executive briefings
- Consulting and advisory experience translating technical depth into strategic customer guidance, incident response planning, and recommendations for advancing incident readiness and response maturity
- Ability to work independently and remotely while coordinating effectively across distributed teams
- Willingness to travel up to 40% for on-site engagements and active case requirements
- Ability to pass a background check as a condition of employment
Benefits:
- Competitive Equity Package
- Comprehensive Benefits Plan


















