Associate Principal Incident Responder
Dragos, Inc.
Salary undisclosed
Need a reasonable accommodation to apply or interview? Contact us.
JobMinglr uses automated technology to recommend jobs based on profile information and job preferences. Match Score does not determine eligibility for a position, prevent a user from viewing or applying to a job, or make hiring decisions on behalf of an employer.
Description
At Dragos, the mission is personal. The systems we protect deliver the water you drink, power your home, and keep the hospitals your community depends on running. Those critical infrastructure systems that power our civilization around the world are under attack every day by adversaries. When those systems fail, people are immediately at risk. We are the global leader in xOT cybersecurity, combining technology, threat intelligence, and expert services. The people here chose this work because they understand what is at stake. Here, you will find a remote-first mission-driven team across North America, Europe, the Middle East, and APAC built on authenticity, transparency, and trust. If safeguarding the systems that protect your family, friends, and community is the kind of work that matters to you, you are in the right place.
About the Role:
Dragos is hiring an Associate Principal Incident Responder in Germany to lead OT incident response and strengthen customer IR maturity across Europe. You’ll run active investigations and deliver advisory work, including maturity assessments, tabletop exercises, and purple teaming, while improving our IR methodologies and representing Dragos as a thought leader. Ideal for practitioners who are equally strong executing investigations and advising on strategy.
Responsibilities:
- Lead incident response engagements for industrial customers, onsite and remotely, including investigations, threat hunts, triage, and compromise assessments.
- Serve as Incident Commander during active incidents, delivering decision-grade guidance and managing communications throughout the response lifecycle.
- Drive investigations to resolution across industrial environments, from root-cause analysis to containment and remediation strategy, with participation in the on-call rotation.
- Own the post-incident loop by conducting after-action reviews and feeding lessons learned into playbooks and procedures.
- Deliver advisory services such as IR planning workshops, tabletop exercises, and maturity assessments that align response capabilities with business risk.
- Mentor teammates and act as a technical escalation point, while staying accountable for delivery quality, timeliness, and utilization.
- Build customer relationships and strengthen Dragos services through stakeholder engagement, research and thought leadership, and input on service offerings and delivery models.
Qualifications:
- Must be a German resident.
- Fluent in German with a working proficiency in English.
- 8+ years of hands-on incident response and digital forensics experience, with lead-level scope and depth in at least two of network, hardware (controllers/instrumentation), memory, or disk forensics. Methodology mastery matters more than tool specialization.
- Proven ability to lead end-to-end investigations, correlating events across data types to uncover threats, hunt malicious activity, and coordinate communications during incidents.
- Experience in ICS/OT cybersecurity, including industrial architecture, threat landscapes, vulnerabilities, and frameworks and standards.
- Experience in industrial environments (asset owner, operator, integrator, or consultant), with the ability to advise at both technical and enterprise-strategy levels.
- Consulting or advisory experience, translating technical depth into strategic guidance, with excellent written and verbal communication, including customer-facing documentation, playbooks, executive briefings, and calm leadership during high-pressure incidents.
- Familiarity with the European and German OT regulatory context: NIS2, IT-SiG 2.0, BSI KRITIS, IEC 62443, and NIST CSF.
- Willingness to travel up to 40% (domestic and international) to support customer engagements.
Compensation:
- Salary: €120,000
- Competitive Equity Package
- Comprehensive Benefits Plan
#LI-JF1 #LI-REMOTE
Dragos is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, state, or local laws. All new hires must pass a background check as a condition of employment.
Benefits
- stock options
About this role
Dragos is seeking an Associate Principal Incident Responder based in Germany to lead operational technology incident response across European customers. This role combines hands-on investigation work with strategic advisory services—you'll command active incidents for industrial clients, conduct forensic analysis across networks and systems, perform threat hunts, and serve as the technical decision-maker during breaches. Beyond investigations, you'll design and deliver maturity assessments, tabletop exercises, and IR planning workshops that help customers strengthen their security posture against the unique threats facing critical infrastructure.
The ideal candidate brings 8+ years of incident response and forensics experience with demonstrated expertise in at least two forensic domains (network, hardware, memory, or disk analysis). You'll need deep knowledge of industrial control systems and OT environments—whether from asset owner, operator, integrator, or consulting backgrounds—plus familiarity with European regulatory frameworks like NIS2, IT-SiG 2.0, and BSI KRITIS. Strong communication skills are essential; you'll translate technical findings into executive briefings, mentor team members, and represent Dragos as a thought leader in the OT security space.
German residency and fluency in German are required, along with working English proficiency. The role is hybrid and involves up to 40% travel to customer sites across Europe and internationally. You'll participate in on-call incident response rotation and contribute to improving Dragos's methodologies and service offerings. The position offers a €120,000 salary, competitive equity, and comprehensive benefits.
How this employer is doing
average
- Recent Acquisition
In the news
Accenture plc completed the acquisition of an unknown majority stake in Dragos, Inc., marketscreener.com
Pay for this role
The employer didn't post a pay range for this role. That usually means pay is set in negotiation, which favors whoever arrives with numbers. Check ranges on comparable Associate Principal Incident Responder postings in your area, and analyze any offer before you accept it.
Before you apply, worth reading
How JobMinglr reads this job
Every listing here is scored against your profile before you apply: skills overlap, experience level, location and work arrangement, each weighted and explained. You see the score and the reasons, not just a list. How the matching works.