Senior Threat Detection Engineer

Dragos
United States
Workplace: RemoteFull timeUSD 152,000 - 152,000 annuallyFunction: Administration & Executive AssistanceExperience: 8+ yearsSkills: ["Mentoring","Technical writing","Verbal presentation","Team collaboration","Peer feedback"]

Build and operationalize high-fidelity ICS threat detections and asset identification analytics for the Dragos Platform. Work with cyber threat intelligence to translate adversary behaviors into atomic, component, composite, and event detections, then test, validate, and tune them using packet captures and Windows host logs. Mentor detection engineers, drive detection-support triage, and partner across engineering, OT Watch, and quality to close protocol coverage gaps.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Dragos
Dragos
5 days ago

Senior Threat Detection Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 19 hours agoStatus: Live

Job Summary

Build and operationalize high-fidelity ICS threat detections and asset identification analytics for the Dragos Platform. Work with cyber threat intelligence to translate adversary behaviors into atomic, component, composite, and event detections, then test, validate, and tune them using packet captures and Windows host logs. Mentor detection engineers, drive detection-support triage, and partner across engineering, OT Watch, and quality to close protocol coverage gaps.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Administration & Executive Assistance
Seniority: Mid level

Key Responsibilities

  • •Create ICS-focused threat detections (atomic, component, composite, and events) and asset identification analytics based on assigned tickets.
  • •Mentor Detection Engineers through the detection development process and delegate portions they are ready to own.
  • •Engage with Principal Detection Engineers using packet captures and Windows host logs to support detection development initiatives.
  • •Test, validate, and tune detections for analytic quality control, including rules submitted by trusted advisors and industry partners.
  • •Lead review and triage for detection requests in the Intel Detection Support board, enriching tickets with PCAPs, links, tags, and documentation.
Travel: Low travel

Pay and Benefits

Salary: USD 152,000 annually
Equity and Bonus:Equity

Key Requirements

  • •8+ years in security operations, threat hunting, detection development, offensive operations, threat emulation, or security tool development.
  • •2+ years operationalizing cyber threat intelligence to defend networks from emerging threats.
  • •1+ years hands-on experience with SCADA, DCS, building automation, or other industrial control system devices and environments.
  • •Advanced network packet analysis using tools such as Wireshark, Tshark, ngrep, tcpdump, Zeek, and Scapy.
  • •Experience with Windows Event Logging fundamentals and the ability to mentor and develop junior detection engineers.
Experience:8+ yearsICS cybersecurityThreat huntingSecurity operationsThreat intelligenceDetection engineering
Skills:MentoringTechnical writingVerbal presentationTeam collaborationPeer feedback
Certifications:SANS GICSPSANS GRIDSANS GCTISANS GCIASANS GCIHSANS GCDAOffensive Security OSCPOffensive Security OSEPOffensive Security OSEDCompTIA CySA+CompTIA PenTest+
Languages:English
Tech Stack:WiresharkTsharkNgrepTcpdumpZeekScapySuricataSnortYARAPythonRustRubyGoLuaSplunkElasticsearchECS schemaWindows Event LoggingAdvanced Audit PoliciesPacket captures

Company Brief

Dragos
Provides industrial cybersecurity solutions protecting operational technology (OT) and industrial control systems (ICS) with threat detection, incident response, and asset visibility to secure critical infrastructure and manufacturing environments.
Industry: Cybersecurity
Company Size: Large (251 to 1,000 employees)
Growth: Scaleup
Valuation: Unicorn (USD 1B+)
Funding: Series D
Headquarters: Washington, D.C., United States
Founded: 2016
WebsiteLinkedIn