Dragos

6 days ago

Senior Manager, Adversary Hunting

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 19 hours agoStatus: Live

Job Summary

Lead and mentor a highly skilled Adversary Hunting team focused on tracking OT-focused threats and producing WorldView intelligence reporting. Serve as the primary point of contact for daily intelligence operations, run hands-on hunting work using Synapse and Storm Query Language, and translate outcomes into prioritized detection opportunities (IOCs and YARA rules). Partner cross-functionally across intelligence, vulnerability research, and malware analysis while driving KPIs and representing the team externally.

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Solutions Engineering & Sales Engineering

Seniority: Sr. Manager level

Key Responsibilities

•Lead, mentor, and develop the Adversary Hunting team, guiding coverage of OT-focused Threat Groups and Temporary Activity Threads (TATs).
•Serve as the primary point of contact for the team within Intelligence, aligning priorities and daily operations with collection requirements and WorldView reporting goals.
•Lead day-to-day hunting operations, refine methodologies, and optimize workflows across Synapse and Storm Query Language-based investigative pipelines.
•Translate hunting outcomes into prioritized WorldView content and detection opportunities by partnering with Intelligence Operations, Vulnerability Research, and Capabilities/Malware Analysis (IOCs, YARA rules).
•Deliver and improve KPIs for coverage, WorldView reporting production, and RFI response quality, including guiding high-quality analytical outputs and representing the team externally.

Travel: Low travel

Pay and Benefits

Salary: USD 205,000

Equity and Bonus:Equity

Key Requirements

•5-7+ years of experience in threat intelligence, adversary tracking, threat hunting, or detection engineering, with at least 2 years mentoring or providing leadership to personnel.
•Experience tracking OT-focused Threat Groups and TATs, using hypothesis-driven hunting, and producing WorldView-style intelligence reporting.
•Strong knowledge of attacker TTPs and frameworks used in threat hunting/adversary tracking (MITRE ATT&CK for ICS, Diamond Model, ICS Cyber Kill Chain).
•Proficiency with Synapse and Storm Query Language for data modeling, threat hunting, and investigative workflows.
•Familiarity with network telemetry tools (e.g., NetFlow, Censys, Shodan) and file-based analysis platforms (e.g., VirusTotal, Joe Sandbox).

Experience:5+ yearsThreat intelligenceThreat huntingOT securityAdversary trackingDetection engineeringCritical infrastructureIntelligence production

Skills:MentoringCommunicationAnalytical rigorTechnical excellenceCross-functional collaboration

Languages:English

Tech Stack:SynapseStorm Query LanguageMITRE ATT&CK for ICSDiamond ModelICS Cyber Kill ChainWorldViewIOCsYARA rulesNetFlowCensysShodanVirusTotalJoe SandboxPIPEDREAMYIR

Company Brief

Dragos

Provides industrial cybersecurity solutions protecting operational technology (OT) and industrial control systems (ICS) with threat detection, incident response, and asset visibility to secure critical infrastructure and manufacturing environments.

Industry: Cybersecurity

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Series D

Headquarters: Washington, D.C., United States

Founded: 2016

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Dragos

6 days ago

Senior Manager, Adversary Hunting

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 19 hours agoStatus: Live

Job Summary

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Solutions Engineering & Sales Engineering

Seniority: Sr. Manager level

Key Responsibilities

•Lead, mentor, and develop the Adversary Hunting team, guiding coverage of OT-focused Threat Groups and Temporary Activity Threads (TATs).
•Serve as the primary point of contact for the team within Intelligence, aligning priorities and daily operations with collection requirements and WorldView reporting goals.
•Lead day-to-day hunting operations, refine methodologies, and optimize workflows across Synapse and Storm Query Language-based investigative pipelines.
•Translate hunting outcomes into prioritized WorldView content and detection opportunities by partnering with Intelligence Operations, Vulnerability Research, and Capabilities/Malware Analysis (IOCs, YARA rules).
•Deliver and improve KPIs for coverage, WorldView reporting production, and RFI response quality, including guiding high-quality analytical outputs and representing the team externally.

Travel: Low travel

Pay and Benefits

Salary: USD 205,000

Equity and Bonus:Equity

Key Requirements

•5-7+ years of experience in threat intelligence, adversary tracking, threat hunting, or detection engineering, with at least 2 years mentoring or providing leadership to personnel.
•Experience tracking OT-focused Threat Groups and TATs, using hypothesis-driven hunting, and producing WorldView-style intelligence reporting.
•Strong knowledge of attacker TTPs and frameworks used in threat hunting/adversary tracking (MITRE ATT&CK for ICS, Diamond Model, ICS Cyber Kill Chain).
•Proficiency with Synapse and Storm Query Language for data modeling, threat hunting, and investigative workflows.
•Familiarity with network telemetry tools (e.g., NetFlow, Censys, Shodan) and file-based analysis platforms (e.g., VirusTotal, Joe Sandbox).

Experience:5+ yearsThreat intelligenceThreat huntingOT securityAdversary trackingDetection engineeringCritical infrastructureIntelligence production

Skills:MentoringCommunicationAnalytical rigorTechnical excellenceCross-functional collaboration

Languages:English

Tech Stack:SynapseStorm Query LanguageMITRE ATT&CK for ICSDiamond ModelICS Cyber Kill ChainWorldViewIOCsYARA rulesNetFlowCensysShodanVirusTotalJoe SandboxPIPEDREAMYIR

Company Brief

Dragos

Industry: Cybersecurity

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Series D

Headquarters: Washington, D.C., United States

Founded: 2016

Website LinkedIn