Principal Penetration Tester

At Dragos, the mission is personal. The systems we protect deliver the water you drink, power your home, and keep the hospitals your community depends on running. Those critical infrastructure systems that power our civilization around the world are under attack every day by adversaries. When those systems fail, people are immediately at risk. We are the global leader in xOT cybersecurity, combining technology, threat intelligence, and expert services. The people here chose this work because they understand what is at stake . Here, you will find a remote-first mission-driven team across North America, Europe, the Middle East, and APAC built on authenticity, transparency, and trust. If safeguarding the systems that protect your family, friends, and community is the kind of work that matters to you, you are in the right place. About the Role : Our Professional Services Team is seeking Associate Principal OT Penetration Tester who will provide technical leadership across vulnerability assessments, penetration testing, and adversary emulation activities supporting customer services engagements. You will shape engagement strategy and uncover real‑world attack paths across ICS/OT networks through hands‑on exploitation and deep technical analysis, working closely with customers across critical infrastructure sectors such as oil and gas, electric, water treatment, and manufacturing. You will also translate findings into clear, actionable remediation guidance, influencing detection and platform development. You will mentor team members and be an advisor and representative of Dragos within the broader OT security community. Responsibilities : • Serve as primary technical lead and trusted advisor for Dragos’s most complex, high-impact industrial penetration testing, purple teaming, and vulnerability assessment engagements, shaping engagement direction and aligning deep technical execution with client business goals. • Set the technical bar for OT penetration testing excellence by defining methodologies, assessment frameworks, and red team tactics informed by threat intelligence and adversary emulation. Design and lead offensive campaigns modeled on known and unknown TTPs to uncover complex attack paths across IT/OT boundaries and within industrial environments. • Translate hands-on findings into strategic R&D priorities, guiding the development of proprietary tools, behavioral analytics, and detection content by identifying gaps in visibility, response, and prevention in customer environments. • Evolve internal playbooks, runbooks, and operating procedures, applying field lessons, threat intelligence, and emerging adversary behaviors to improve the efficiency, scalability, and effectiveness of the penetration testing practice. • Engage executive stakeholders, internally and externally, with strategic cybersecurity guidance, risk prioritization, and remediation recommendations tied to business objectives, delivering clear, authoritative presentations to C-suites, boards, and technical leadership. • Represent Dragos as an industry thought leader through original research, top-tier conference presentations, whitepapers, and public engagements that advance OT security with unique insights and innovation. • Mentor engineering, threat intelligence, and consulting teams across functions, cultivating future leaders and a culture of continuous learning, technical curiosity, and mission-driven execution. Qualifications : • 8+ years of hands-on cybersecurity experience in vulnerability assessment, penetration testing, or red teaming within the OT space, with in-depth knowledge of OT penetration testing methodologies in white, gray, and black-box contexts. • Deep understanding of OT-specific architectures and services, including DCS, histor