Role overview

Qualifications

7+ years of hands‑on cybersecurity experience, including delivering professional services or consulting engagements in customer environments.
Deep expertise in ICS/OT cybersecurity, including OT system architectures, risks, threats, vulnerabilities, and relevant frameworks and standards.
Direct, practical experience operating in ICS/OT environments (e.g., asset owner, industrial plant, or operator setting).
Strong technical proficiency with OT assets (e.g., PLCs, HMIs, RTUs), OT networking protocols (e.g., Modbus, DNP3), and security analysis tools (e.g., Zeek/Bro, Wireshark).

Responsibilities

Lead ICS/OT Cybersecurity Professional Services Engagements including architecture reviews, compromise assessments, and tabletop exercises for customers across various verticals including electric, oil and gas, water treatment, and manufacturing.
Serve as the primary point of contact and SME for consulting clients, providing expert guidance while building strong relationships.
Deliver findings and recommendations documentation at the end of each engagement (this includes presenting to customers and addressing questions and concerns).
Perform Scope of Work (SOW) reviews, Rules of Engagement (ROE) development, and other documentation-related tasks.

Key facts

Remote from: United States
Freelance
Senior (5-10 years)
Cybersecurity Consultant
English

Hard skills

Cyber Security Threat Assessment Architectural Design Network Protocols Security Analysis

Other skills

Communication
Mentorship
Relationship Building
Leadership

About the company

Dragos, Inc.

Dragos has a global mission to safeguard civilization from those trying to disrupt the industrial infrastructure we depend on every day. The Dragos Platform offers the most effective industrial cybersecurity technology, giving customers visibility into their ICS/OT assets, vulnerabilities, threats, and response actions. The strength behind the Dragos Platform comes from our ability to codify Dragos's industry-leading OT threat intelligence, and insights from the Dragos services team, into the software. Our community-focused approach gives you access to the largest array of industrial organizations participating in collective defense, with the broadest visibility available.  Our solutions protect organizations across a range of industries, including electric, oil & gas, manufacturing, building automation systems, chemical, government, water, food & beverage, mining, transportation, and pharmaceutical. Dragos is privately held and headquartered in the Washington, DC area with regional presence around the world, including Canada, Australia, New Zealand, Europe, and the Middle East.

Company details

Company size501 - 1000

Links

Website LinkedIn See all jobs

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

Dragos is on a relentless mission to defend industrial organizations that provide us with the necessities of modern civilization; running water, functioning electricity, and safe industrial working environments. As the market leader in ICS/OT Cybersecurity, we are dedicated to arming our customers with best-in-class technology, threat intelligence, and services to protect their systems as effectively and efficiently as possible. We’re a remote-first culture with operations in North America, Europe, the Middle East, and APAC. We’re looking for mission-oriented teammates who embody our core values of authenticity, transparency, and trust. Are you ready to make a difference? Come join a mission that can save the world!

About the Role:

As an Associate Principal Consultant on the Professional Services team, you will lead complex cybersecurity engagements that help industrial organizations strengthen and mature their OT security programs. Your focus will be on delivering architecture reviews, threat assessments, tabletop exercises, and other advisory services across key ICS/OT sectors including oil and gas, electric, water treatment, and manufacturing. You will translate deep technical insight into practical, strategic guidance for engineering, operations, and executive stakeholders. You will also mentor team members, contribute insights that inform platform and research advancements, and represent the Dragos mission through customer and community engagement.

Responsibilities:

Lead ICS/OT Cybersecurity Professional Services Engagements including architecture reviews, compromise assessments, and tabletop exercises for customers across various verticals including electric, oil and gas, water treatment, and manufacturing.
Serve as the primary point of contact and SME for consulting clients, providing expert guidance while building strong relationships.
Deliver findings and recommendations documentation at the end of each engagement (this includes presenting to customers and addressing questions and concerns).
Perform Scope of Work (SOW) reviews, Rules of Engagement (ROE) development, and other documentation-related tasks.
Turn insights from customer engagements into research and innovation projects to fuel Dragos technology advancement (i.e., training material, Dragos Platform playbooks, etc.).
Support the larger community and represent Dragos through outreach efforts such as webinars, whitepapers, and conference presentations with novel content and ideas.
Mentor teammates and be a leadership resource for the professional services organization.

Qualifications:

7+ years of hands‑on cybersecurity experience, including delivering professional services or consulting engagements in customer environments.
Deep expertise in ICS/OT cybersecurity, including OT system architectures, risks, threats, vulnerabilities, and relevant frameworks and standards.
Direct, practical experience operating in ICS/OT environments (eg., asset owner, industrial plant, or operator setting).
Strong technical proficiency with OT assets (e.g., PLCs, HMIs, RTUs), OT networking protocols (e.g., Modbus, DNP3), and security analysis tools (e.g., Zeek/Bro, Wireshark).
Demonstrated ability to collect and analyze network and host data to baseline environments, validate expected state, and identify malicious or anomalous activity.
Excellent written and verbal communication skills, including producing high‑quality customer reports and presenting complex technical findings to diverse audiences.
Willingness to support Dragos Services growth through thought leadership and SME outreach and to travel for onsite engagements as needed (approximately 30%).

Compensation:

Salary: $150,000
Competitive Equity Package
Comprehensive Benefits Plan

#LI-JF1 #LI-REMOTE

Dragos is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, state, or local laws. All new hires must pass a background check as a condition of employment.