Associate Principal Cyber Threat Intelligence Analyst

About Dragos

Dragos is committed to protecting critical infrastructure systems that power essential services such as water, electricity, healthcare, and food production. As a global leader in operational technology (OT) cybersecurity, Dragos combines advanced technology, threat intelligence, and expert services to defend these vital systems worldwide. The company values authenticity, transparency, and trust within its remote-first, mission-driven teams spread across multiple continents.

Role Overview

This role involves embedded collaboration with a Singapore government security team, acting as a trusted expert in OT cyber threat intelligence. The successful candidate will lead threat hunting operations, provide tailored intelligence reports, and influence government security strategies through independent judgments while cooperating with various Dragos teams to extend intelligence reach. Experience in delivering customized threat intelligence, practical threat hunting capabilities, and a solid understanding of industrial control systems (ICS) are essential.

Key Responsibilities

• Provide direct ICS/OT cyber threat intelligence support aligned with critical national security priorities for the Singapore client, establishing credibility to influence strategic priorities.
• Conduct ICS/OT cyber threat research, analysis, and hunting activities using both proprietary and commercial tools, performing hypothesis-driven and exploratory hunts by analyzing network traffic and industrial protocols to detect anomalies.
• Assist in establishing baseline OT assets and network behaviors across Singapore’s critical infrastructure, utilizing the Dragos Platform, Synapse, and other analytical tools to verify and prioritize leads.
• Interpret ICS/OT threat data relevant to client objectives, offer guidance on mitigation best practices, and develop specialized knowledge of the client's threat landscape.
• Convert technical findings from threat hunts into frameworks such as MITRE ATT&CK for ICS, delivering confidence-based assessments suitable for non-technical audiences.
• Support incident response efforts and exercises alongside the client during security incidents.
• Create industry-specific ICS/OT cyber threat intelligence content and contribute feedback to internal Dragos teams to enhance overall intelligence effectiveness.

Candidate Requirements

• Must be a Singapore citizen holding an active Security Clearance.
• At least four years of experience in cyber threat intelligence utilizing diverse data sources including NetFlow, OSINT, SIEMs, and malware databases to craft intelligence reports.
• Proven hands-on experience in threat hunting with capabilities encompassing packet capture analysis and deep inspection of industrial protocols.
• Expertise in both freeform and hypothesis-led threat hunting methodologies.
• Demonstrated experience in managing stakeholders effectively in client-facing roles.
• Strong written communication skills for producing cyber threat intelligence products, including confidence-based analytic assessments and applying frameworks such as the Diamond Model of Intrusion Analysis.
• Skilled in using data aggregation and analysis platforms (e.g., Synapse) and adept at incorporating AI and large language models into CTI workflows.

Preferred Qualifications

• In-depth understanding of ICS/OT-specific threats across various industries, including adversary tactics, techniques, and procedures (TTPs), knowledge of industrial technologies like PLCs, HMIs, RTUs, and network topologies.
• Experience independently designing and delivering CTI analyses using recognized frameworks such as MITRE ATT&CK for ICS, D3FEND, and the ICS Cyber Kill Chain.

Compensation and Benefits

• Annual salary of 180,000 SGD
• Attractive equity package
• Comprehensive benefits plan

Equal Opportunity Employment

Dragos is committed to equal employment opportunities, considering candidates without discrimination based on race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other legally protected status. Employment is contingent upon a successful background check.