{"id":140919,"url":"https://alion.io/job/dragos-associate-principal-cyber-threat-intelligence-analyst-2","title":"Associate Principal Cyber Threat Intelligence Analyst","company":{"id":49114,"name":"Dragos","domain":"dragos.com","url":"https://alion.io/company/dragos","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":85,"open_postings":5,"ghost_share":0,"stale_share":0.6,"repost_share":0,"time_to_fill_p50_days":37,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Washington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":165000,"max":null,"currency":"USD","period":"year","gross":null,"usd_annual":165000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-08-27T19:38:24Z","employer_posted_date":"2026-09-23","last_verified_at":"2026-10-30T05:21:16Z","board_verified":true,"closed_at":null,"days_open":63,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":63},"description":"At Dragos, the mission is personal. The systems we protect deliver the water you drink, power your home, and keep the hospitals your community depends on running. Those critical infrastructure systems that power our civilization around the world are under attack every day by adversaries. When those systems fail, people are immediately at risk. We are the global leader in xOT cybersecurity, combining technology, threat intelligence, and expert services. The people here chose this work because they understand what is at stake. Here, you will find a remote-first mission-driven team across North America, Europe, the Middle East, and APAC built on authenticity, transparency, and trust. If safeguarding the systems that protect your family, friends, and community is the kind of work that matters to you, you are in the right place. \nAbout the Role: \nOur Cyber Threat Intelligence Team is seeking a Cyber Threat Intelligence Analyst who will directly support a Dragos federal customer. In this role you'll partner closely with your assigned customer and deliver tailored ICS/OT threat intelligence products to their Security and Intel teams. You'll research and analyze threats against critical infrastructure and translate your findings into briefings, written reports and operational guidance. You'll work onsite with their staff, understand their systems and environment, and collaborate across their organization to ensure intelligence connects to real defensive action. Our ideal candidate will have a strong background in CTI, threat hunting and have an understanding of industrial control systems. \nResponsibilities: \nDirectly support your customer with their respective ICS/OT security and cyber threat intelligence needs. \nConduct threat research, analysis, and hunting tasks using a variety of proprietary and commercial resources to respond to client inquiries and craft tailored deliverables based on priority intelligence requirements. \nDevelop expertise in ICS/OT threats and risks directly relevant to your customer's environment, including attack surface analysis, threat hunting strategies, and threat modeling. \nSupport your customer’s cybersecurity initiatives to include threat hunts, incident response, and exercises. \nPartner with internal Threat Intelligence peers to craft operational and strategic content for global Dragos Worldview customers. \nProvide support and feedback to other internal Dragos teams, such as Incident Response, OT-Watch, Professional Services and Customer Experience. \nQualifications: \nMust have an active Top Secret (TS) Security Clearance.\nMust be willing and able to work onsite at customer location in Washington DC.\nAt least 5 years of hands-on experience in the threat intelligence field using multiple resources and disciplines including network-based data (ie, NetFlow), OSINT, SIEMs, malware repositories, and DFIR.\nProven ability to create effective intelligence analysis products relevant for government agencies, federal civilian organizations or critical infrastructure sectors.\nExperience integrating unclassified and classified threat intelligence into cohesive deliverables.\nThreat hunting experience within ICS/OT environments or related technology settings.\nProven experience producing operational and strategic intelligence reporting using confidence-based assessments.\nProficiency with data aggregation, hunting, and analysis tools (eg, Synapse). \nExperience building threat models relevant to specific threat and risk profiles.\nCompensation: \nSalary: $165,000\nCompetitive Equity Package \nComprehensive Benefits Plan \n#LI-JF1 #LI-REMOTE \nDragos is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, state, or local laws. All new hires must pass a background check as a condition of employment.","description_format":"text","description_chars":3930,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence","Information Security","Network Security","Incident Response"],"lifecycle":[{"event":"open","at":"2026-08-27T19:38:24Z"}],"visa":[],"liveness":{"score":26,"band":"fade","label":"Fading","p_open":1,"p_active":0.709,"p_room":0.36,"age_days":63,"expected_fill_days":37,"reasons":["conf:0","velocity","win:tail","crowd:"],"computed_at":"2026-10-30T05:48:23Z"},"pay":{"stated_usd_annual":165000,"is_top_pay":false},"html_url":"https://alion.io/job/dragos-associate-principal-cyber-threat-intelligence-analyst-2","json_url":"https://alion.io/job/dragos-associate-principal-cyber-threat-intelligence-analyst-2.json","meta":{"generated_at":"2026-10-30T08:47:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12575,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":49114},"rest":"https://alion.io/mcp/rest/get_company?id=49114"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdragos-associate-principal-cyber-threat-intelligence-analyst-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdragos-associate-principal-cyber-threat-intelligence-analyst-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdragos-associate-principal-cyber-threat-intelligence-analyst-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dragos-associate-principal-cyber-threat-intelligence-analyst-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdragos-associate-principal-cyber-threat-intelligence-analyst-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":140919}},{"tool":"search_jobs","arguments":{"company":"dragos.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":140919},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}