Senior Industrial Incident Responder
Dragos Inc., Canada

Responsibilities

• Collaborate with teammates for Incident Response Retainer customers; this includes onsite and offsite incident response activities to include triage and analysis within industrial environments
• Collaborate with teammates for hunts within industrial environments; including initial planning phases, execution and reporting phase
• Serve as lead in investigations, hunts and day-to-day operations in industrial environments
• Generate playbooks and other content for customers
• Assist in other service engagements such as tabletop exercises, assessments, training, etc

Requirements

• Willingness to be a team player on fast-moving team focused on rapidly innovating the state of industrial security
• 3+ years hands-on experience
• Skilled in intrusion analysis, incident response and forensics
• Ability to analyze and interact with industrial network protocols
• Ability to run an investigation from start to finish including pivoting between data types and correlating events together
• Desire to learn of industrial environments including software platforms, PLCs, RTUs, instrumentation and the industrial processes they sustain is required. Prior experience is a big plus
• Demonstration of ability to proactively hunt and identify malicious activity
• Knowledge of Windows, Linux and a variety of industrial software and hardware and various security toolsets
• Ability to script with Python, Ruby, bash, etc
• Excellent social, verbal and written communication skills; ability work effectively with customers
• Ability to share on-call responsibilities including non-standard hours, unplanned remote and onsite response efforts

Job Rewards and Benefits