Associate Principal Cyber Threat Intelligence Analyst

2 weeks, 6 days ago
Full-time
Mid Level
Cybersecurity
Dragos

Dragos

Dragos is an industrial cybersecurity company focused on safeguarding civilization by securing industrial assets across vertical industries. Their integrated software platform provides critical visibility into ICS and OT networks, enabling clients in p...

Professional Services
251-1K
Founded 2016
$438M raised

Description

  • Directly support the client’s ICS/OT cyber threat intelligence needs in high-stakes national security contexts.
  • Lead ICS/OT cyber threat intelligence research, analysis, and threat hunting using proprietary and commercial resources.
  • Perform both freeform and hypothesis-driven hunts by analyzing network traffic and industrial protocols for anomalous behavior.
  • Establish baseline OT asset and network behaviors across Singapore’s critical infrastructure using Dragos Platform, Synapse, and related tools.
  • Contextualize ICS/OT threats and risks, and provide guidance on best practices and mitigations.
  • Translate hunt results into MITRE ATT&CK for ICS mappings and confidence-based assessments for non-technical stakeholders.
  • Support the client during incident response engagements and exercises.
  • Develop industry-focused technical and strategic ICS/OT CTI content.
  • Provide feedback to internal Dragos teams to improve intelligence impact across the organization.

Requirements

  • Must be a Singapore citizen and have an active Security Clearance.
  • Minimum 4 years of cyber threat intelligence experience using multiple data sources such as NetFlow, open-source intelligence, SIEMs, and malware repositories.
  • Hands-on threat hunting experience, including packet capture analysis and industrial protocol inspection.
  • Strong expertise in both freeform and hypothesis-driven threat hunting methodologies.
  • Experience in a customer-facing role with the ability to manage stakeholders independently and effectively.
  • Strong technical and strategic writing skills for CTI products, confidence-based assessments, and threat modeling frameworks such as Diamond Model of Intrusion Analysis.
  • Proficiency with data aggregation, hunting, and analysis tools such as Synapse.
  • Experience leveraging AI/LLM resources in CTI workflows.
  • Deep knowledge of ICS/OT threats across industrial verticals, including adversary TTPs, PLCs, HMIs, RTUs, and network protocols and topologies (preferred).
  • Ability to independently scope, develop, and deliver CTI analysis using frameworks such as MITRE ATT&CK for ICS, D3FEND, and ICS Cyber Kill Chain (preferred).

Benefits

  • Salary of 180,000 SGD.
  • Competitive equity package.
  • Comprehensive benefits plan.
  • Remote-first work environment.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Security Scientist

Figma 1K-5K Internet Software & Services

Figma is hiring a Security Scientist to use security expertise and data analysis to reduce risks, improve detection and response, and strengthen the safety of its products, platform, and IT systems.

Apache Spark Presto Python R Snowflake SQL
2 days, 14 hours ago

Senior TPRM Analyst

EVOCS 1-10 Internet Software & Services

EVOCS is hiring two remote Senior TPRM Analysts to lead complex third-party risk assessments, advise leadership on vendor exposures, and strengthen the company’s technology risk management program.

Cybersecurity Penetration Testing
3 days, 14 hours ago

TPRM Analyst

EVOCS 1-10 Internet Software & Services

EVOCS is hiring four remote TPRM Analysts to execute third-party security assessments, maintain accurate risk records, and drive vendor remediation activities to closure.

Cybersecurity Penetration Testing
3 days, 14 hours ago

Senior Security Assurance Engineer

GitLab 1K-5K Internet Software & Services

GitLab is hiring a Security Compliance professional to operate its technology compliance program across corporate, security, engineering, and third-party systems, unifying controls and evidence for regulatory, contractual, and security assurance needs.

DevSecOps GitLab
4 days, 13 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers