At Dragos, the mission is personal. The systems we protect deliver the water you drink, power your home, and keep the hospitals your community depends on running. Those critical infrastructure systems that power our civilization around the world are under attack every day by adversaries. When those systems fail, people are immediately at risk. We are the global leader in xOT cybersecurity, combining technology, threat intelligence, and expert services. The people here chose this work because they understand what is at stake. Here, you will find a remote-first mission-driven team across North America, Europe, the Middle East, and APAC built on authenticity, transparency, and trust. If safeguarding the systems that protect your family, friends, and community is the kind of work that matters to you, you are in the right place.
About the Role:
Our Professional Services Team is seeking Associate Principal OT Penetration Tester who will provide technical leadership across vulnerability assessments, penetration testing, and adversary emulation activities supporting customer services engagements. You will shape engagement strategy and uncover real‑world attack paths across ICS/OT networks through hands‑on exploitation and deep technical analysis, working closely with customers across critical infrastructure sectors such as oil and gas, electric, water treatment, and manufacturing. You will also translate findings into clear, actionable remediation guidance, influencing detection and platform development. You will mentor team members and be an advisor and representative of Dragos within the broader OT security community.
Responsibilities:
Qualifications:
Compensation:
#LI-JF1 #LI-REMOTE
Dragos is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, state, or local laws. All new hires must pass a background check as a condition of employment.
Lead high-stakes product security incident investigations, coordinate vulnerability fixes across engineering and release teams, and oversee CVE disclosure to strengthen response practices across a SaaS platform.
Lead high-severity product security investigations and incident response, coordinate fixes across engineering and release teams, and own CVE disclosure to strengthen ServiceNow’s security response.
Leads high-impact product security investigations and incident response, coordinating vulnerability fixes, CVE disclosures, and post-incident improvements across engineering, product, and release teams.
Lead organization-wide IAM security strategy and engineering, from authentication migrations and identity infrastructure to least-privilege programs, incident response, and regulatory engagement.
Lead application security across the development pipeline, product, and customer execution environments by shaping security architecture, partnering with engineering teams, and building guarded AI-assisted workflows.
