TavoraxTavorax
Back to All Tech JobsVerified ATS Listing
D

Associate Principal Incident Responder

Dragos•Remote
Work Mode

🌐 Remote

Job Type

full_time

Posted

9/23/2026

Role Overview & Requirements

div class= content-intro p span class= TextRun SCXW107525881 BCX8 lang= EN-US data-contrast= none span class= NormalTextRun SCXW107525881 BCX8 At Dragos, the mission is personal. The systems we protect deliver the water you drink, power your home, and keep the hospitals your community depends on running. Those critical infrastructure systems that power our civilization around the world are under attack every day by adversaries. When those systems fail, people are nbsp; /span span class= NormalTextRun SCXW107525881 BCX8 immediately /span span class= NormalTextRun SCXW107525881 BCX8 nbsp;at risk. nbsp; /span span class= NormalTextRun SCXW107525881 BCX8 We are the global leader in nbsp; /span span class= NormalTextRun SCXW107525881 BCX8 xOT /span span class= NormalTextRun SCXW107525881 BCX8 nbsp;cybersecurity, combining technology, threat intelligence, and expert services. The people here chose this work because they understand nbsp; /span span class= NormalTextRun SCXW107525881 BCX8 what is /span span class= NormalTextRun SCXW107525881 BCX8 nbsp;at stake /span span class= NormalTextRun SCXW107525881 BCX8 . Here, you will find a remote-first mission-driven team across North America, Europe, the Middle East, and APAC built on authenticity, transparency, and trust. If safeguarding the systems that protect your family, friends, and community is the kind of work that matters to you, you are in the right place. /span /span span class= EOP Selected SCXW107525881 BCX8 data-ccp-props= { quot;134233117 quot;:false, quot;134233118 quot;:false, quot;201341983 quot;:0, quot;335551550 quot;:1, quot;335551620 quot;:1, quot;335559685 quot;:0, quot;335559737 quot;:0, quot;335559738 quot;:120, quot;335559739 quot;:160, quot;335559740 quot;:360} nbsp; /span /p /div p strong span data-contrast= auto About the Role /span /strong span data-contrast= auto : /span span data-ccp-props= {} nbsp; /span /p p span data-ccp-props= {} Dragos is hiring an Associate Principal Incident Responder in Germany to lead OT incident response and strengthen customer IR maturity across Europe. You’ll run active investigations and deliver advisory work, including maturity assessments, tabletop exercises, and purple teaming, while improving our IR methodologies and representing Dragos as a thought leader. Ideal for practitioners who are equally strong executing investigations and advising on strategy. /span /p p strong span data-contrast= auto Responsibilities /span /strong span data-contrast= auto : /span span data-ccp-props= {} nbsp; /span /p ul li Lead incident response engagements for industrial customers, onsite and remotely, including investigations, threat hunts, triage, and compromise assessments. /li li Serve as Incident Commander during active incidents, delivering decision-grade guidance and managing communications throughout the response lifecycle. /li li Drive investigations to resolution across industrial environments, from root-cause analysis to containment and remediation strategy, with participation in the on-call rotation. /li li Own the post-incident loop by conducting after-action reviews and feeding lessons learned into playbooks and procedures. /li li Deliver advisory services such as IR planning workshops, tabletop exercises, and maturity assessments that align response capabilities with business risk. /li li Mentor teammates and act as a technical escalation point, while staying accountable for delivery quality, timeliness, and utilization. /li li Build customer relationships and strengthen Dragos services through stakeholder engagement, research and thought leadership, and input on service offerings and delivery models. /li /ul p strong span data-contrast= auto Qualifications /span /strong span data-contrast= auto : /span span data-ccp-props= {} nbsp; /span /p ul li span data-ccp-props= {} Must be a German resident. nbsp; /span /li li span class= TextRun SCXW166103310 BCX8 lang= EN-CA data-contrast= none span class= NormalTextRun SCXW166103310 BCX8 Fluent in /span span class= NormalTextRun SCXW166103310 BCX8 German /span span class= NormalTextRun SCXW166103310 BCX8 with /span span class= NormalTextRun SCXW166103310 BCX8 a working /span span class= NormalTextRun SCXW166103310 BCX8 proficiency /span span class= NormalTextRun SCXW166103310 BCX8 in /span span class= NormalTextRun CommentStart SCXW166103310 BCX8 English /span span class= NormalTextRun SCXW166103310 BCX8 . /span /span span class= EOP Selected SCXW166103310 BCX8 data-ccp-props= { quot;335559739 quot;:60} nbsp; /span /li li 8+ years of hands-on incident response and digital forensics experience, with lead-level scope and depth in at least two of network, hardware (controllers/instrumentation), memory, or disk forensics. Methodology mastery matters more than tool specialization. /li li Proven ability to lead end-to-end investigations, correlating events across data types to uncover threats, hunt malicious activity, and coordinate communications during incidents. /li li Experience in ICS/OT cybersecurity, including industrial architecture, threat landscapes, vulnerabilities, and frameworks and standards. /li li Experience in industrial environments (asset owner, operator, integrator, or consultant), with the ability to advise at both technical and enterprise-strategy levels. /li li Consulting or advisory experience, translating technical depth into strategic guidance, with excellent written and verbal communication, including customer-facing documentation, playbooks, executive briefings, and calm leadership during high-pressure incidents. /li li Familiarity with the European and German OT regulatory context: NIS2, IT-SiG 2.0, BSI KRITIS, IEC 62443, and NIST CSF. nbsp; /li li span class= TextRun SCXW83838752 BCX8 lang= EN-CA data-contrast= none span class= NormalTextRun CommentStart SCXW83838752 BCX8 Willingness to travel up to 40% /span span class= NormalTextRun SCXW83838752 BCX8 (domestic and international) to support customer engagements. /span /span span class= EOP Selected SCXW83838752 BCX8 data-ccp-props= { quot;335559739 quot;:60} nbsp; /span /li /ul p strong span data-contrast= auto Compensation /span /strong span data-contrast= auto : /span span data-ccp-props= {} nbsp; /span /p ul li data-leveltext=  data-font= Symbol data-listid= 3 data-list-defn-props= { quot;335552541 quot;:1, quot;335559683 quot;:0, quot;335559684 quot;:-2, quot;335559685 quot;:720, quot;335559991 quot;:360, quot;469769226 quot;: quot;Symbol quot;, quot;469769242 quot;:[8226], quot;469777803 quot;: quot;left quot;, quot;469777804 quot;: quot; quot;, quot;469777815 quot;: quot;hybridMultilevel quot;} data-aria-posinset= 1 data-aria-level= 1 span data-contrast= none Salary: €120,000 /span /li li data-leveltext=  data-font= Symbol data-listid= 3 data-list-defn-props= { quot;335552541 quot;:1, quot;335559683 quot;:0, quot;335559684 quot;:-2, quot;335559685 quot;:720, quot;335559991 quot;:360, quot;469769226 quot;: quot;Symbol quot;, quot;469769242 quot;:[8226], quot;469777803 quot;: quot;left quot;, quot;469777804 quot;: quot; quot;, quot;469777815 quot;: quot;hybridMultilevel quot;} data-aria-posinset= 1 data-aria-level= 1 Competitive Equity Package span data-ccp-props= { quot;134233117 quot;:false, quot;134233118 quot;:false, quot;335551550 quot;:0, quot;335551620 quot;:0, quot;335557856 quot;:16777215, quot;335559738 quot;:0, quot;335559739 quot;:0} nbsp; /span /li li data-leveltext=  data-font= Symbol data-listid= 3 data-list-defn-props= { quot;335552541 quot;:1, quot;335559683 quot;:0, quot;335559684 quot;:-2, quot;335559685 quot;:720, quot;335559991 quot;:360, quot;469769226 quot;: quot;Symbol quot;, quot;469769242 quot;:[8226], quot;469777803 quot;: quot;left quot;, quot;469777804 quot;: quot; quot;, quot;469777815 quot;: quot;hybridMultilevel quot;} data-aria-posinset= 1 data-aria-level= 1 Comprehensive Benefits Plan span data-ccp-props= { quot;134233117 quot;:false, quot;134233118 quot;:false, quot;335551550 quot;:0, quot;335551620 quot;:0, quot;335557856 quot;:16777215, quot;335559738 quot;:0, quot;335559739 quot;:0} nbsp; /span /li /ul p span data-ccp-props= {} nbsp; /span /p p span data-contrast= none #LI-JF1 #LI-REMOTE nbsp; /span span data-ccp-props= {} nbsp; /span /p p nbsp; /p p nbsp; /p div class= content-conclusion p Dragos is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, state, or local laws. All new hires must pass a background check as a condition of employment. /p /div Find more English Speaking Jobs in Germany on Arbeitnow
Direct application via arbeitnow
Apply Directly on Dragos ATS
Associate Principal Incident Responder at Dragos | Verified Tech Jobs