Principal Penetration Tester

The role

You will provide technical leadership for industrial penetration testing, purple teaming, and vulnerability assessments. You will shape engagement strategy, uncover attack paths in ICS/OT networks, and translate findings into remediation guidance.

What you will do

• Serve as primary technical lead for complex industrial penetration testing and vulnerability assessments.
• Define methodologies, assessment frameworks, and red team tactics.
• Design and lead offensive campaigns modeled on TTPs.
• Translate findings into strategic R&D priorities to guide tool and detection development.
• Evolve internal playbooks, runbooks, and operating procedures.
• Engage executive stakeholders with strategic cybersecurity guidance and risk prioritization.
• Represent Dragos as an industry thought leader through research and presentations.
• Mentor engineering, threat intelligence, and consulting teams.

Required qualifications

• 8+ years of hands-on cybersecurity experience in vulnerability assessment, penetration testing, or red teaming within the OT space.
• In-depth knowledge of OT penetration testing methodologies in white, gray, and black-box contexts.
• Deep understanding of OT-specific architectures and services, including DCS, historians, SCADA networks, transmission/distribution management, AMI, and related communication protocols.
• Extensive knowledge of OT cyber threats, attack paths, exploits, and adversary TTPs.
• Hands-on experience with offensive security tooling such as Metasploit, Nmap, Kali Linux, Cobalt Strike, Burp Suite, common LOTL toolsets, and C2 frameworks.
• Advanced experience with networking components (routers, switches, load balancers, firewalls).
• Ability to analyze network traffic and host data in a cybersecurity context.
• Proven experience using large language models (e.g., Claude) to support penetration testing execution and reporting.
• Strong report-writing and presentation skills.
• Ability to work independently in a remote environment and coordinate across distributed teams.
• Willingness to travel up to 30-40% (domestic and international).

Benefits

• Competitive Equity Package
• Comprehensive Benefits Plan

Before you apply

• All new hires must pass a background check

About the company

Dragos is the global leader in xOT cybersecurity, combining technology, threat intelligence, and expert services. The team is remote-first across North America, Europe, the Middle East, and APAC.