ApplySarthiAssociate Principal Incident Responder
Dragos
Tailor my CV for this job, freeView job and applyYour CV rewritten for this role, from your real experience. Sign in with Google, nothing to install.
Got this interview? Our apps help you get the job.
Skills named in this job
Read from the description itself, not inferred.
This role on the market
7 open responder roles across 5 companies are on ApplySarthi right now, most of them in Pune (1).
- Technical Consultant - TDR - Threar ResponderIBM
- Senior Incident Responder (m/w/d)HvS-Consulting GmbH
- Senior Security Monitoring and Response Analyst (Incident Responder)Mastercard · pune
- Senior Incident Responder, Global CSIRTSalesforce
What responder roles keep asking for: AWS (29%), Azure (29%), GCP (29%), LLMs (29%), Linux (29%), SIEM (29%), CI/CD (14%), CRM (14%) — counted across their open postings here.
Dragos has 4 open roles listed here.
Counted across 14 company job boards, updated as roles open and close.
Preparing for this interview
Interviews for responder roles keep coming back to AWS, Azure, GCP, LLMs. Practise those questions before you sit with Dragos.
Questions you are likely to be asked
- Why do you want to join Dragos?
- What is your experience with Stakeholder management? Tell me one thing you learned the hard way.
- Where do you want to be in three years?
- What is a weakness you are working on, and how?
- Tell me about yourself, and why this role is the right next step.
Prep Sarthi gives you a free mock interview: an AI interviewer asks you questions like these out loud, from your own CV and this job, and shows your score and your weakest answer.
Practise the Associate Principal Incident Responder at Dragos interview free →At Dragos, the mission is personal. The systems we protect deliver the water you drink, power your home, and keep the hospitals your community depends on running. Those critical infrastructure systems that power our civilization around the world are under attack every day by adversaries. When those systems fail, people are immediately at risk. We are the global leader in xOT cybersecurity, combining technology, threat intelligence, and expert services. The people here chose this work because they understand what is at stake. Here, you will find a remote-first mission-driven team across North America, Europe, the Middle East, and APAC built on authenticity, transparency, and trust. If safeguarding the systems that protect your family, friends, and community is the kind of work that matters to you, you are in the right place.
About the Role:
Dragos is hiring an Associate Principal Incident Responder in Germany to lead OT incident response and strengthen customer IR maturity across Europe. You’ll run active investigations and deliver advisory work, including maturity assessments, tabletop exercises, and purple teaming, while improving our IR methodologies and representing Dragos as a thought leader. Ideal for practitioners who are equally strong executing investigations and advising on strategy.
Responsibilities:
- Lead incident response engagements for industrial customers, onsite and remotely, including investigations, threat hunts, triage, and compromise assessments.
- Serve as Incident Commander during active incidents, delivering decision-grade guidance and managing communications throughout the response lifecycle.
- Drive investigations to resolution across industrial environments, from root-cause analysis to containment and remediation strategy, with participation in the on-call rotation.
- Own the post-incident loop by conducting after-action reviews and feeding lessons learned into playbooks and procedures.
- Deliver advisory services such as IR planning workshops, tabletop exercises, and maturity assessments that align response capabilities with business risk.
- Mentor teammates and act as a technical escalation point, while staying accountable for delivery quality, timeliness, and utilization.
- Build customer relationships and strengthen Dragos services through stakeholder engagement, research and thought leadership, and input on service offerings and delivery models.
Qualifications:
- Must be a German resident.
- Fluent in German with a working proficiency in English.
- 8+ years of hands-on incident response and digital forensics experience, with lead-level scope and depth in at least two of network, hardware (controllers/instrumentation), memory, or disk forensics. Methodology mastery matters more than tool specialization.
- Proven ability to lead end-to-end investigations, correlating events across data types to uncover threats, hunt malicious activity, and coordinate communications during incidents.
- Experience in ICS/OT cybersecurity, including industrial architecture, threat landscapes, vulnerabilities, and frameworks and standards.
- Experience in industrial environments (asset owner, operator, integrator, or consultant), with the ability to advise at both technical and enterprise-strategy levels.
- Consulting or advisory experience, translating technical depth into strategic guidance, with excellent written and verbal communication, including customer-facing documentation, playbooks, executive briefings, and calm leadership during high-pressure incidents.
- Familiarity with the European and German OT regulatory context: NIS2, IT-SiG 2.0, BSI KRITIS, IEC 62443, and NIST CSF.
- Willingness to travel up to 40% (domestic and international) to support customer engagements.
Compensation:
- Salary: €120,000
- Competitive Equity Package
- Comprehensive Benefits Plan
#LI-JF1 #LI-REMOTE
Dragos is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, state, or local laws. All new hires must pass a background check as a condition of employment.
Match this job to your CV
ApplySarthi scores your CV against this role, shows the skills you are missing, and writes a tailored version for the application.
Check my match →Similar open roles
Need answers during your interview? Try Live Sarthi.
Live Sarthi, an Interview Sarthi app, shows answer suggestions during the call.
- Hidden from supported screen sharingThe overlay stays out of supported Windows screen captures.
- Answers start in about 1.5 secondsResponse time varies with your connection and model.
- From your own CVYour projects and your experience, not a generic script.
- 30 minutes freeThen ₹99 for a 2-day pass with unlimited calls — you pay for the days you are interviewing, not a subscription.
A Windows app, from the same team as ApplySarthi.
Listed on arbeitnow · posted 2026-10-17. ApplySarthi collects openings and links to application pages; the role is advertised by Dragos, not by us.