Associate Principal Incident Responder - Public Sector

The role

You will lead Operational Technology incident response investigations and advance customer OT IR maturity. This role involves leading active response engagements and delivering advisory work for federal customers.

What you will do

• Lead and execute incident response engagements as Incident Commander
• Conduct post-incident reviews, root-cause analysis, and integrate lessons learned
• Develop and deliver advisory services including workshops, assessments, and tabletop exercises
• Manage customer relationships and stakeholder communication
• Contribute to research, threat analysis, and thought leadership
• Mentor and develop teammates through hands-on training
• Drive delivery accountability for quality, timeliness, and utilization

Required qualifications

• U.S. citizenship
• Active Top Secret (TS) security clearance
• 8+ years of hands-on incident response and digital forensics experience
• Proficiency in at least two forensics domains (network, hardware, memory, disk)
• Proven experience in ICS/OT cybersecurity
• Knowledge of industrial architecture, threat landscapes, vulnerabilities, and applicable frameworks and standards
• Proven ability to lead end-to-end investigations
• Proven incident management and communication ability
• Consulting and advisory experience
• Ability to work independently and remotely
• Willingness to travel up to 40% for on-site engagements and active case requirements

Benefits

• Competitive Equity Package
• Comprehensive Benefits Plan

Before you apply

• U.S. citizenship required
• Active Top Secret (TS) security clearance required
• All new hires must pass a background check

About the company

Dragos is a global leader in xOT cybersecurity, combining technology, threat intelligence, and expert services. The company is a remote-first mission-driven team across North America, Europe, the Middle East, and APAC.