Senior OT Security Analyst

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Oversee shift operations and direct analysts in triaging detection alerts and network telemetry within customer OT environments.

• Act as a senior investigator for suspicious activities, misconfigurations, anomalies, and potential malicious actions across industrial networks.

• Evaluate findings and escalate actionable documentation to incident responders and threat hunters.

• Collaborate with analysts, threat hunters, incident responders, platform engineers, and Detection Engineering teams.

• Refine detection logic, minimize false positives, and contribute to the development of Dragos Platform detections and playbooks.

• Compose and present incident summaries and operational reports for both internal stakeholders and customers.

• Assist with asset classification, vulnerability management, hardening recommendations, and customer information inquiries.

• Continuously enhance knowledge of ICS/OT protocols, adversary tactics, and industrial threat intelligence.

• Operate and maintain the Dragos Platform on behalf of customers.

⛳️ Requirements

• 3–5 years of experience in network security, preferably with practical exposure to real-world threat investigations.

• Strong understanding of TCP/IP, firewalls, DNS, and packet analysis.

• Practical experience with IDS/IPS, SIEM platforms, or network traffic analyzers.

• Excellent written and verbal communication skills with a keen attention to detail.

• Genuine interest in ICS/OT cybersecurity along with the ability to learn and apply complex, industry-specific concepts.

• Capability to work independently in a remote setting while coordinating with distributed teams.

• Willingness to engage in shift-based coverage and occasional weekend/on-call duties.

• Initial schedule: Monday–Friday, 8am–5pm, with on-call weekends; transitioning later to a four-day, 10-hour shift model including one weekend day.

• Must successfully pass a background check as a condition of employment.

• Preferred: Experience in a Security Operations Center (SOC).

• Preferred: Familiarity with OT protocols such as Modbus, DNP3, and Ethernet/IP, as well as ICS environments.

• Preferred: Knowledge of OT adversary tactics and frameworks, including MITRE ATT&CK for ICS.

• Preferred: Hands-on lab or internship experience in cybersecurity operations, threat hunting, or digital forensics.

• Preferred: Experience with PCAP analysis or basic scripting in Python or Bash.

🏝️ Benefits

• Competitive Equity Package.

• Comprehensive Benefits Plan.

• Remote-first work environment.

• Opportunity to gain practical experience in active OT security operations.