Security Specialist Principal (Dragos)

Job Posting End Date

09-04-2025

Please note the job posting will close on the day before the posting end date

Job Summary

Responsible for enterprise-wide cybersecurity initiatives focused on protecting industrial control systems and operational technology. Provide direction to team members and lead efforts in the review, evaluation, and recommendation of emerging security technologies relevant to critical infrastructure. Lead and participate in security incidents and projects, directing assignments that enhance the security posture of the organization.

Demonstrate advanced problem-solving and decision-making skills, along with deep knowledge of the cybersecurity landscape, particularly in industrial environments. Frequently involved in the implementation, support, and utilization of technical solutions tailored to safeguard operational technology. Mentor team members and provide functional and technical guidance to ensure effective security practices are upheld.

Job Description

What You'll Do:

• Lead the Cyber Intelligence & Response Center (CIRC) at Dragos to prevent, identify, and respond to cyber threats across IT, OT, and cloud environments.

• Assign priorities and tasks to CIRC team members for effective threat management.

• Analyze cyber threat intelligence products to assess impacts on critical infrastructure.

• Coordinate incident response efforts with U.S. government agencies and industry peers.

• Collaborate on cyber threat and security best practices with government and industry partners.

• Lead cyber threat hunting initiatives using the MITRE ATT&CK framework and Lockheed Martin Cyber Kill Chain.

• Maintain expertise in OT protocols, ICS, and SCADA systems for comprehensive threat detection.

• Familiar with SIEM platforms and network analysis tools used in OT environments.

• Conduct forensic analysis of host and network events to support investigations.

• Prepare and deliver engaging cyber threat briefings to diverse audiences.

• Reverse engineer malware to understand threats targeting industrial control systems.

• Communicate security challenges effectively to senior leadership.

• Conduct root cause analysis for OT incidents and document findings.

• Promote diversity and ensure team members receive training for skill development.

• Create presentations on cybersecurity topics and simplify complex concepts.

• Formulate solutions for advanced security challenges and identify process improvements.

• Investigate security threats thoroughly and prepare comprehensive job plans.

• Motivate the team to learn about security trends and foster professional growth.

What We're Looking For:

Education:  Bachelor's degree OR Associates degree with 2 years relevant experience in system administration/help desk/security (cyber or physical) OR High School Diploma/GED with 4 years relevant experience in IT system administration/help desk/security (cyber or physical); OR graduation from an approved Cybersecurity Program; alternatively may have non-degree qualifications (such as hands-on demonstrated ability in a technical interview/assessment).   

Experience:  4 or more years of Information Technology related experience; OR 2 or more years of security related experience, which may include military/government work experience in addition to any experience identified above.

Nice to Have:

Demonstrable experience in one or more of the following disciplines:

• Incident Response Analyst

• CIRC/SOC Lead

• Threat Intelligence or Counterintelligence Analyst

• Cyber Threat Hunting Analyst

• Malware Reverse Engineer

• Operational Technology Specialist, particularly in securing industrial control systems and related environments.

Certifications:

• CSFA, GCCC, GCDA, GCED, GCFA, GCFE, GCIA, GCIH, GCIP, GCTI, GDAT, GICSP, GMON, GOSI, GREM, GRID, GSOM, GXPN

• OSCP, OSEE

• Treadstone Certified Threat Intelligence Analyst/Counterintelligence Analyst

• CERT Incident Response Process Professional

• CREST Certified Host Intrusion Analyst

• CREST Certified Incident Manager

• CREST Certified Malware Reverse Engineer

• CREST Certified Network Intrusion Analyst

• CREST Certified Threat Intelligence Manager

Location: Prefer candidate to live within 50 miles of Columbus, OH.

What you’ll get:

In