{"id":129623,"url":"https://alion.io/job/dragos-associate-principal-cyber-threat-intelligence-analyst","title":"Associate Principal Cyber Threat Intelligence Analyst","company":{"id":49114,"name":"Dragos","domain":"dragos.com","url":"https://alion.io/company/dragos","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":85,"open_postings":5,"ghost_share":0,"stale_share":0.6,"repost_share":0,"time_to_fill_p50_days":37,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":["SG"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":70000,"max_usd":162000,"period":"year","method":"role_seniority_country_cell","sample_n":17},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Diamond Model","optional":false},{"name":"LLM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Cyber Kill Chain","optional":true},{"name":"MITRE D3FEND","optional":true}],"status":"live","first_seen_at":"2026-08-20T15:50:41Z","employer_posted_date":"2026-09-23","last_verified_at":"2026-10-29T07:32:48Z","board_verified":true,"closed_at":null,"days_open":69,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":69},"description":"At Dragos, the mission is personal. The systems we protect deliver the water you drink, power your home, and keep the hospitals your community depends on running. Those critical infrastructure systems that power our civilization around the world are under attack every day by adversaries. When those systems fail, people are immediately at risk. We are the global leader in xOT cybersecurity, combining technology, threat intelligence, and expert services. The people here chose this work because they understand what is at stake. Here, you will find a remote-first mission-driven team across North America, Europe, the Middle East, and APAC built on authenticity, transparency, and trust. If safeguarding the systems that protect your family, friends, and community is the kind of work that matters to you, you are in the right place. \nAbout the Role: \nDragos Global Threat Intelligence defends the infrastructure that powers civilization-from clean water and reliable power to food processing and oil & gas production. Every day, our team detects and defeats threats that could disrupt the operations millions of people depend on. We're seeking an OT Cyber Threat Intelligence Analyst to embed with a Singapore government security team as a trusted, autonomous expert. You'll lead threat hunts, deliver tailored intelligence across multiple formats, and represent Dragos inside cleared environments-making independent judgment calls that directly shape government strategy while collaborating across Dragos delivery teams to amplify intelligence impact. Our ideal candidate brings a proven track record delivering tailored threat intelligence in service organizations, hands-on threat hunting experience (both structured and exploratory), and working knowledge of industrial control systems (ICS).\nResponsibilities: \nDirectly support the client with ICS/OT cyber threat intelligence needs, including high-stakes moments involving national security priorities, while establishing credibility to drive priorities rather than simply respond to tasking.\nDrive ICS/OT CTI research, analysis, and threat hunting using proprietary and commercial resources, performing both freeform and hypothesis-driven hunts by analyzing network traffic and industrial protocols to surface anomalous behavior.\nSupport the client in establishing baseline OT asset and network behaviors across Singapore's critical infrastructure using Dragos Platform, Synapse, and complementary tools to validate and prioritize leads.\nContextualize ICS/OT threats and risks relevant to the client's objectives, provide guidance on best practices and mitigations, and develop deep expertise in threats specific to the client's OT environment.\nTranslate technical hunt results into MITRE ATT&CK for ICS mappings and confidence-based assessments that non-technical stakeholders can act on.\nSupport the client during incident response engagements and exercises.\nDevelop industry-focused technical and strategic ICS/OT CTI content and provide feedback to internal Dragos teams to maximize intelligence impact across the organization.\nQualifications: \nMust be a Singapore citizen and have an active Security Clearance. \nMinimum 4 years of cyber threat intelligence experience using multiple data sources (eg, NetFlow, open-source intelligence, SIEMs, malware repositories) to develop analysis products.\nHands-on threat hunting experience, including packet capture analysis and industrial protocol inspection.\nStrong hands-on expertise with both freeform and hypothesis-driven threat hunting methodologies. \nExperience serving in a customer-facing role with demonstrated ability to manage stakeholders independently and effectively.\nStrong technical and strategic writing skills for developing CTI analysis products, including confidence-based assessments and threat modeling frameworks (such as Diamond Model of Intrusion Analysis).\nProficiency with data aggregation, hunting, and analysis tools (e.g., Synapse) and experience leveraging AI/LLM resources in CTI workflows.\nPreferred Qualifications:\nDeep knowledge of ICS/OT threats across industrial verticals, including adversary TTPs, historical attacks, relevant technologies (PLCs, HMIs, RTUs), and network protocols and topologies.\nThe ability to independently scope, develop, and deliver CTI analysis using industry frameworks (MITRE ATT&CK for ICS, D3FEND, ICS Cyber Kill Chain).\nCompensation: \nSalary: 180,000 SGD\nCompetitive Equity Package \nComprehensive Benefits Plan \n#LI-JF1 #LI-REMOTE \nDragos is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, state, or local laws. All new hires must pass a background check as a condition of employment.","description_format":"text","description_chars":4827,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"Singapore","iso":"SG","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence","Information Security","Network Security","Incident Response"],"lifecycle":[{"event":"open","at":"2026-08-20T15:50:41Z"}],"visa":[],"liveness":{"score":27,"band":"fade","label":"Fading","p_open":1,"p_active":0.754,"p_room":0.36,"age_days":69,"expected_fill_days":37,"reasons":["conf:2","velocity","win:tail","crowd:"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/dragos-associate-principal-cyber-threat-intelligence-analyst","json_url":"https://alion.io/job/dragos-associate-principal-cyber-threat-intelligence-analyst.json","meta":{"generated_at":"2026-10-29T07:39:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11634,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":49114},"rest":"https://alion.io/mcp/rest/get_company?id=49114"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdragos-associate-principal-cyber-threat-intelligence-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdragos-associate-principal-cyber-threat-intelligence-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdragos-associate-principal-cyber-threat-intelligence-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dragos-associate-principal-cyber-threat-intelligence-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdragos-associate-principal-cyber-threat-intelligence-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":129623}},{"tool":"search_jobs","arguments":{"company":"dragos.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":129623},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}