Your Dragos resume, matched to the job ad
Drop in your resume and it opens next to this job, ready to tailor in one click.
4.8 from 167 in-app reviews
Senior OT Security Analyst
Dragos · United States
Tailor your resume to this job
No account needed to start.
What Dragos asks for
From Dragos' Senior OT Security Analyst ad, checked 4 Nov 2026.
Threat investigation and triage
Analyzing suspicious activity, network telemetry, and alerts to identify misconfigurations or malicious behavior, then escalating findings to incident responders.
Industrial security and OT protocols
Experience with industrial control systems and protocols such as Modbus or DNP3, and familiarity with frameworks like MITRE ATT&CK for ICS.
Team leadership and mentoring
Leading shift operations and guiding other analysts through triage and investigation tasks.
The ad asks for 3 to 5 years of network security experience, including threat investigation. The role is remote-first across North America, Europe, the Middle East, and APAC.
How the example answers the ad
Threat investigation and triage
“Investigate 100+ security alerts monthly using SIEM platforms to distinguish between benign configuration errors and intrusions.”
Analyzing 100+ monthly alerts with SIEM platforms to find configuration errors or intrusions is the threat investigation and triage the role requires.
Industrial security and OT protocols
“Analyze industrial network telemetry to identify unauthorized Modbus traffic across 12 distributed control system sites.”
Identifying unauthorized Modbus traffic across 12 distributed control system sites covers the industrial security and OT protocols requirement.
Team leadership and mentoring
“Lead a team of 4 junior analysts during daily security operations shifts to maintain 99.9% operational uptime.”
Leading a team of 4 junior analysts during daily security operations shifts provides evidence of the team leadership and mentoring requirement.
The whole example as text
David O'Brien · Senior OT Security Analyst
Summary
Senior OT Security Analyst with 5 years of experience in critical infrastructure protection. Manage industrial control systems security through network monitoring and threat triage. Lead shift rotations for incident response teams across multiple energy sector sites. Map network telemetry to MITRE ATT&CK for ICS frameworks to neutralize industrial threats.
Experience
Senior OT Security Analyst · Chevron
Houston, TX · 2024 - Present
- Analyze industrial network telemetry to identify unauthorized Modbus traffic across 12 distributed control system sites.
- Reduce incident response time by 30% by automating triage workflows for high-fidelity alerts.
- Lead a team of 4 junior analysts during daily security operations shifts to maintain 99.9% operational uptime.
- Document 15+ network anomalies per month for formal escalation to the central incident response command center.
- Implement firmware hardening standards for 50+ legacy programmable logic controllers to prevent unauthorized remote access.
OT Security Analyst · CenterPoint Energy
Houston, TX · 2023 - 2024
- Monitor DNP3 protocol communication for signs of unauthorized setpoint changes in smart grid infrastructure.
- Draft 50+ technical incident reports detailing root causes of network misconfigurations and malicious probes.
- Coordinate with external vendors to patch 200+ edge devices without interrupting critical utility operations.
- Conduct weekly threat hunting exercises focused on identifying lateral movement between enterprise and OT segments.
- Mentor 3 new staff members on ICS-specific packet analysis and behavioral baseline creation.
Cybersecurity Analyst · Phillips 66
Houston, TX · 2022 - 2022
- Deploy IDS signatures to detect malicious activity across internal refinery network segments.
- Investigate 100+ security alerts monthly using SIEM platforms to distinguish between benign configuration errors and intrusions.
- Perform deep-dive packet analysis on 20+ suspicious traffic patterns originating from remote monitoring ports.
- Facilitate training sessions on secure coding practices for field control software updates.
- Maintain detailed logs of network forensic evidence to support quarterly regulatory compliance audits.
Junior SOC Analyst · Entergy
New Orleans, LA · 2021 - 2022
- Triage 200+ incoming security tickets from enterprise endpoints to identify potential credential harvesting campaigns.
- Maintain log ingestion health for SIEM platforms across 5 regional substations.
- Assist senior engineers in the remediation of 20+ infected workstations per month.
- Monitor system availability metrics to ensure continuous visibility of remote utility assets.
- Prepare daily security briefings for operations management regarding network perimeter status.
Education
Bachelor of Science in Cybersecurity · Texas A&M University
College Station, TX · 2017 - 2021
- Graduated with 3.8 GPA and Dean's List honors.
- Completed senior capstone project on securing power grid communication protocols.
- Served as Treasurer for the University Cybersecurity Association.
Graduate Certificate in Industrial Control Systems Security · University of Houston
Houston, TX · 2021 - 2022
- Specialized in SCADA vulnerability assessment and mitigation.
- Awarded Excellence in Technical Research for a paper on Modbus protocol hardening.
- Collaborated on a mock refinery network attack and defense simulation.
Skills
Frequently asked questions
Is the example from an employee?
No. It is an AI-written example for this ad, made to show how a resume can answer it.
What is the shift schedule?
The schedule starts as a standard Monday to Friday, 8am to 5pm role with on-call weekends. It will eventually move to a 4-day, 10-hour shift model that includes one weekend day. Candidates can choose between Sunday to Wednesday or Wednesday to Saturday schedules.
Where do I apply?
On the official Dragos posting, through the job link on this page.
What happens when I tailor my resume here?
Your resume opens in the editor next to this job. Tailor it in one click, then keep or discard the edits. You only need an account to download.